Skip to main navigation Skip to search Skip to main content

Characterizing Adversarial Samples of Convolutional Neural Networks

  • Cheng Jiang
  • , Qiyang Zhao*
  • , Yuzhong Liu
  • *Corresponding author for this work
  • Beihang University
  • JD Technology

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Adversarial samples aim to make deep convolutional neural networks predict incorrectly under small perturbations. This paper investigates non-targeted adversarial samples of convolutional neural networks and makes a primitive attempt to characterize adversarial samples. Two observations are made: first, adversarial perturbations are mainly in the high-frequency domain; second, adversarial categories usually have strong semantic relevance to the original categories. Our two observations provide a solid basis to understand the behavior of convolutional neural networks and thus to improve their robustness against adversarial samples.

Original languageEnglish
Title of host publicationProceedings - 2018 11th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics, CISP-BMEI 2018
EditorsWei Li, Qingli Li, Lipo Wang
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9781538676042
DOIs
StatePublished - 2 Jul 2018
Event11th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics, CISP-BMEI 2018 - Beijing, China
Duration: 13 Oct 201815 Oct 2018

Publication series

NameProceedings - 2018 11th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics, CISP-BMEI 2018

Conference

Conference11th International Congress on Image and Signal Processing, BioMedical Engineering and Informatics, CISP-BMEI 2018
Country/TerritoryChina
CityBeijing
Period13/10/1815/10/18

Fingerprint

Dive into the research topics of 'Characterizing Adversarial Samples of Convolutional Neural Networks'. Together they form a unique fingerprint.

Cite this