Indexed by:
Abstract:
With the development of deep learning technology, convolutional neural network (CNN) has been widely used in many fields such as face recognition, automatic driving, biomedicine, etc., replacing human beings to complete complex and redundant work, which brings great convenience to people’s lives. However, the discovery and development of adversarial examples have created a greater threat to image recognition. In this paper, we propose an adaptive image adversarial example detection method based on class activation mapping, which utilizes the hot zone discovery results of the Grad-CAM algorithm to perform adaptive noise reduction on images and analyzes the differences in the classification results of images before and after the noise reduction in the same benchmark network, including the KL dispersion, the label change, the label confidence, etc., to achieve the detection of adversarial examples on the ImageNet-1000 dataset. The experimental results show that the algorithm proposed in this paper achieves better detection results, and the F1 reaches 0.82 in detecting the generated FGSM adversarial examples with ϵ = 0.3, which is better than the baseline model. © IFIP International Federation for Information Processing 2024.
Keyword:
Reprint Author's Address:
Email:
Source :
ISSN: 0302-9743
Year: 2024
Volume: 14901 LNCS
Page: 259-266
Language: English
Cited Count:
SCOPUS Cited Count:
ESI Highly Cited Papers on the List: 0 Unfold All
WanFang Cited Count:
Chinese Cited Count:
30 Days PV: 7
Affiliated Colleges: