arXiv:2502.16044cs.CVcs.CR2025-02被引 1

用多尺度孤立森林实时检测并过滤自动驾驶视频中的FGSM攻击

A Multi-Scale Isolation Forest Approach for Real-Time Detection and Filtering of FGSM Adversarial Attacks in Video Streams of Autonomous Vehicles

  • 基于多尺度孤立森林分析图像特征差异,识别异常样本
  • 在1万张图上测试,ε=0.2时仍保持95%以上检测准确率
  • 适合需要高安全性的自动驾驶视觉系统部署

深度神经网络在图像分类等任务中表现优异,但极易受到对抗攻击。本文针对快梯度符号法(FGSM)攻击提出一种新型检测与过滤方法。实验对10,000张图像施加五种强度的扰动(ε=0.01, 0.02, 0.05, 0.1, 0.2),均沿损失梯度方向添加。结果表明,该方法能有效识别并过滤被篡改图像,显著降低FGSM攻击影响。算法以Python实现,源码已公开于GitHub,支持复现与后续研究。

原文摘要 · Abstract (English)

Deep Neural Networks (DNNs) have demonstrated remarkable success across a wide range of tasks, particularly in fields such as image classification. However, DNNs are highly susceptible to adversarial attacks, where subtle perturbations are introduced to input images, leading to erroneous model outputs. In today's digital era, ensuring the security and integrity of images processed by DNNs is of critical importance. One of the most prominent adversarial attack methods is the Fast Gradient Sign Method (FGSM), which perturbs images in the direction of the loss gradient to deceive the model. This paper presents a novel approach for detecting and filtering FGSM adversarial attacks in image processing tasks. Our proposed method evaluates 10,000 images, each subjected to five different levels of perturbation, characterized by $ε$ values of 0.01, 0.02, 0.05, 0.1, and 0.2. These perturbations are applied in the direction of the loss gradient. We demonstrate that our approach effectively filters adversarially perturbed images, mitigating the impact of FGSM attacks. The method is implemented in Python, and the source code is publicly available on GitHub for reproducibility and further research.

对抗攻击视频检测自动驾驶异常检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。