arXiv:2409.02251cs.CVcs.AI2024-09被引 3

用白噪声实现可定制的多目标后门攻击,隐蔽性强且难检测。

NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise

  • 以不同功率谱密度的白噪声为触发器,实现样本级多目标攻击。
  • 在多个主流模型和数据集上攻击成功率超95%,且可绕过现有检测方法。
  • 首次实现仅靠少量配置生成多种目标类,适合研究安全防御的学者。

后门攻击对使用第三方数据训练深度学习模型构成重大威胁。攻击者通过在数据中植入特定触发模式,使模型在遇到该模式时产生异常行为,从而获得非法优势。现有工作通常设计可见或不可见的触发模式,但大多仅能将受害者类别单一转换为预定义的目标类别。本文提出一种新型样本特定的多目标后门攻击——NoiseAttack,采用具有不同功率谱密度(PSD)的白高斯噪声(WGN)作为触发器,并结合独特训练策略完成攻击。这是首个旨在仅用极少输入配置实现多目标视觉后门攻击的工作。大量实验表明,NoiseAttack在主流网络架构和数据集上均能达到超过95%的攻击成功率,且可有效规避当前最先进的后门检测方法。代码与实验已公开于 https://github.com/SiSL-URI/NoiseAttack/tree/main。

原文摘要 · Abstract (English)

Backdoor attacks pose a significant threat when using third-party data for deep learning development. In these attacks, data can be manipulated to cause a trained model to behave improperly when a specific trigger pattern is applied, providing the adversary with unauthorized advantages. While most existing works focus on designing trigger patterns in both visible and invisible to poison the victim class, they typically result in a single targeted class upon the success of the backdoor attack, meaning that the victim class can only be converted to another class based on the adversary predefined value. In this paper, we address this issue by introducing a novel sample-specific multi-targeted backdoor attack, namely NoiseAttack. Specifically, we adopt White Gaussian Noise (WGN) with various Power Spectral Densities (PSD) as our underlying triggers, coupled with a unique training strategy to execute the backdoor attack. This work is the first of its kind to launch a vision backdoor attack with the intent to generate multiple targeted classes with minimal input configuration. Furthermore, our extensive experimental results demonstrate that NoiseAttack can achieve a high attack success rate against popular network architectures and datasets, as well as bypass state-of-the-art backdoor detection methods. Our source code and experiments are available at https://github.com/SiSL-URI/NoiseAttack/tree/main.

后门攻击白噪声多目标模型安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。