Universal Perturbation-based Secret Key-Controlled Data Hiding
Not on the map. Why?
Abstract (arXiv)
Deep neural networks (DNNs) are demonstrated to be vulnerable to universal perturbation, a single quasi-perceptible perturbation that can deceive the DNN on most images. However, the previous works are focused on using universal perturbation to perform adversarial attacks, while the potential usability of universal perturbation as data carriers in data hiding is less explored, especially for the key-controlled data hiding method. In this paper, we propose a novel universal perturbation-based secret key-controlled data-hiding method, realizing data hiding with a single universal perturbation and data decoding with the secret key-controlled decoder. Specifically, we optimize a single universal perturbation, which serves as a data carrier that can hide multiple secret images and be added to most cover images. Then, we devise a secret key-controlled decoder to extract different secret images from the single container image constructed by the universal perturbation by using different secret keys. Moreover, a suppress loss function is proposed to prevent the secret image from leakage. Furthermore, we adopt a robust module to boost the decoder's capability against corruption. Finally, A co-joint optimization strategy is proposed to find the optimal universal perturbation and decoder. Extensive experiments are conducted on different datasets to demonstrate the effectiveness of the proposed method. Additionally, the physical test performed on platforms (e.g., WeChat and Twitter) verifies the usability of the proposed method in practice.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 24 of its 40 references that are in the map. First posted on arXiv 3 Nov 2023.
Builds on
24 of 40 references.
References · 24
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Mask R-CNNcited by 7,277
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,859
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,852
- 2016Universal adversarial perturbationscited by 784
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2019Adversarial Training for Free!cited by 643
- 2018HiDDeN: Hiding Data With Deep Networkscited by 397
12 more
- 2019StegaStamp: Invisible Hyperlinks in Physical Photographscited by 265
- 2021MBRS : Enhancing Robustness of DNN-based Watermarking by Mini-Batch of Real and Simulated JPEG Compressioncited by 110
- 2018Generalizable Data-free Objective for Crafting Universal Adversarial Perturbationscited by 88
- 2021FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attackcited by 74
- 2019SteganoGAN: High Capacity Image Steganography with GANscited by 72
- 2017Fast Feature Fool: A data independent approach to universal adversarial perturbationscited by 66
- 2020Understanding Adversarial Examples from the Mutual Influence of Images and Perturbationscited by 59
- 2020Unadversarial Examples: Designing Objects for Robust Visioncited by 45
- 2018Ask, Acquire, and Attack: Data-free UAP Generation using Class Impressionscited by 31
- 2023RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical Worldcited by 23
- 2022Defensive Patches for Robust Recognition in the Physical Worldcited by 20
- 2022Generative Steganography Networkcited by 15
Built on by
Not cited yet.