Friend-safe evasion attack: An adversarial example that is correctly recognized by a friendly classifier
- Authors
- Kwon, Hyun; Kim, Yongchul; Park, Ki-Woong; Yoon, Hyunsoo; Choi, Daeseon
- Issue Date
- Sep-2018
- Publisher
- ELSEVIER ADVANCED TECHNOLOGY
- Keywords
- Deep Neural Network; Evasion Attack; Adversarial Example; Covert Channel; Machine Learning
- Citation
- COMPUTERS & SECURITY, v.78, pp.380 - 397
- Journal Title
- COMPUTERS & SECURITY
- Volume
- 78
- Start Page
- 380
- End Page
- 397
- URI
- http://scholarworks.bwise.kr/ssu/handle/2018.sw.ssu/39717
- DOI
- 10.1016/j.cose.2018.07.015
- ISSN
- 0167-4048
- Abstract
- Deep neural networks (DNNs) have been applied in several useful services, such as image recognition, intrusion detection, and pattern analysis of machine learning tasks. Recently proposed adversarial examples-slightly modified data that lead to incorrect classification are a severe threat to the security of DNNs. In some situations, however, an adversarial example might be useful, such as when deceiving an enemy classifier on the battlefield. In such a scenario, it is necessary that a friendly classifier not be deceived. In this paper, we propose a friend-safe adversarial example, meaning that the friendly machine can classify the adversarial example correctly. To produce such examples, a transformation is carried out to minimize the probability of incorrect classification by the friend and that of correct classification by the adversary. We suggest two configurations for the scheme: targeted and untargeted class attacks. We performed experiments with this scheme using the MNIST and CIFAR10 datasets. Our proposed method shows a 100% attack success rate and 100% friend accuracy with only a small distortion: 2.18 and 1.54 for the two respective MNIST configurations, and 49.02 and 27.61 for the two respective CIFAR10 configurations. Additionally, we propose a new covert channel scheme and a mixed battlefield application for consideration in further applications. (C) 2018 Elsevier Ltd. All rights reserved.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - College of Information Technology > School of Software > 1. Journal Articles
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.