用生成模型生成可解释的图像,还能当对抗样本骗过分类器。
Efficient Visualization of Neural Networks with Generative Models and Adversarial Perturbations
- 只用生成器和判别器,不靠多网络对抗训练
- 生成图像能精准对应标签,攻击成功率高达94.5%
- 可视化结果可量化评估,适合研究模型可解释性与安全
本文提出一种基于生成模型的深度可视化新方法,简化了传统多网络架构,仅需一个生成器和一个判别器。该方法无需大量先验训练,采用非对抗式训练流程,判别器作为引导而非竞争者。核心贡献在于生成与特定类别标签高度一致的细节丰富图像。模型引入受跳跃连接启发的模块设计,实现跨层类别信息传播,提升标签导向的图像生成能力。进一步研究表明,这些生成图像可作为对抗样本,在几乎不可察觉的扰动下成功欺骗分类网络。实验表明,该方法在定向与非定向攻击中均优于传统技术,最大欺骗率达94.5%。本工作弥合了可视化与对抗样本之间的鸿沟,提出以欺骗率作为可视化质量的量化指标,为神经网络可解释性与脆弱性提供了新视角。
原文摘要 · Abstract (English)
This paper presents a novel approach for deep visualization via a generative network, offering an improvement over existing methods. Our model simplifies the architecture by reducing the number of networks used, requiring only a generator and a discriminator, as opposed to the multiple networks traditionally involved. Additionally, our model requires less prior training knowledge and uses a non-adversarial training process, where the discriminator acts as a guide rather than a competitor to the generator. The core contribution of this work is its ability to generate detailed visualization images that align with specific class labels. Our model incorporates a unique skip-connection-inspired block design, which enhances label-directed image generation by propagating class information across multiple layers. Furthermore, we explore how these generated visualizations can be utilized as adversarial examples, effectively fooling classification networks with minimal perceptible modifications to the original images. Experimental results demonstrate that our method outperforms traditional adversarial example generation techniques in both targeted and non-targeted attacks, achieving up to a 94.5% fooling rate with minimal perturbation. This work bridges the gap between visualization methods and adversarial examples, proposing that fooling rate could serve as a quantitative measure for evaluating visualization quality. The insights from this study provide a new perspective on the interpretability of neural networks and their vulnerabilities to adversarial attacks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。