17 June 2024 Reconstructing images with attention generative adversarial network against adversarial attacks
Xiong Shen, Yiqin Lu, Zhe Cheng, Zhongshu Mao, Zhang Yang, Jiancheng Qin
Author Affiliations +
Abstract

Deep learning is widely used in the field of computer vision, but the emergence of adversarial examples threatens its application. How to effectively detect adversarial examples and correct their labels has become a problem to be solved in this application field. Generative adversarial networks (GANs) can effectively learn the features from images. Based on GAN, this work proposes a defense method called “Reconstructing images with GAN” (RIG). The adversarial examples are generated by attack algorithms reconstructed by the trained generator of RIG to eliminate the perturbations of the adversarial examples, which disturb the models for classification, so that the models can restore their labels when classifying the reconstructed images. In addition, to improve the defensive performance of RIG, the attention mechanism (AM) is introduced to enhance the defense effect of RIG, which is called reconstructing images with attention GAN (RIAG). Experiments show that RIG and RIAG can effectively eliminate the perturbations of the adversarial examples. The results also show that RIAG has a better defensive performance than RIG in eliminating the perturbations of adversarial examples, which indicates that the introduction of AM can effectively improve the defense effect of RIG.

© 2024 SPIE and IS&T
Xiong Shen, Yiqin Lu, Zhe Cheng, Zhongshu Mao, Zhang Yang, and Jiancheng Qin "Reconstructing images with attention generative adversarial network against adversarial attacks," Journal of Electronic Imaging 33(3), 033029 (17 June 2024). https://doi.org/10.1117/1.JEI.33.3.033029
Received: 9 September 2023; Accepted: 14 May 2024; Published: 17 June 2024
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Image restoration

Defense and security

Image classification

Education and training

Gallium nitride

Neural networks

Adversarial training

Back to Top