Universal adversarial perturbation for remote sensing images
Not on the map. Why?
Abstract (arXiv)
Recently, with the application of deep learning in the remote sensing image (RSI) field, the classification accuracy of the RSI has been dramatically improved compared with traditional technology. However, even the state-of-the-art object recognition convolutional neural networks are fooled by the universal adversarial perturbation (UAP). The research on UAP is mostly limited to ordinary images, and RSIs have not been studied. To explore the basic characteristics of UAPs of RSIs, this paper proposes a novel method combining an encoder-decoder network with an attention mechanism to generate the UAP of RSIs. Firstly, the former is used to generate the UAP, which can learn the distribution of perturbations better, and then the latter is used to find the sensitive regions concerned by the RSI classification model. Finally, the generated regions are used to fine-tune the perturbation making the model misclassified with fewer perturbations. The experimental results show that the UAP can make the classification model misclassify, and the attack success rate of our proposed method on the RSI data set is as high as 97.09%.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 16 of its 30 references that are in the map. First posted on arXiv 22 Feb 2022.
Builds on
16 of 30 references.
References · 16
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
- 2015SegNet: A Deep Convolutional Encoder-Decoder Architecture for Image Segmentationcited by 1,483
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2016Universal adversarial perturbationscited by 774
- 2018Generating Adversarial Examples with Adversarial Networkscited by 256
- 2018Spatially Transformed Adversarial Examplescited by 195
4 more
- 2017PatternNet: A Benchmark Dataset for Performance Evaluation of Remote Sensing Image Retrievalcited by 96
- 2022Universal Adversarial Examples in Remote Sensing: Methodology and Benchmarkcited by 24
- 2018Adversarial Examples in Remote Sensingcited by 19
- 2020Generalizing Universal Adversarial Attacks Beyond Additive Perturbationscited by 17
Built on by
Citing papers per year: 2023: 1.
1 paper.