Welcome to visit《 Journal of Air Force Engineering University 》Official website!

Consultation hotline:029-84786242 RSS EMAIL-ALERT
An Improved Mixup Attack for Directed Attack Image Classification Models
DOI:
CSTR:
Author:
Affiliation:

Clc Number:

TP751.1

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    In this paper,a directional attack black-box attack method named improved mixup attack (IMA) method is designed aimed at the current problems that researches on adversarial examples of targeted attacks are less,and black-box attack capability is very weak in remote sensing image classification.The method aims to directionally fool the classification model out of the deep neural network,discover its vulnerable parts,and enable our high-value target to be detected as a low or no-value target.The method,firstly,is used to extract the shallow global features of the image by an image classification deep learning model,and is used to realize the targeted attack for changing the input image pixels to approximate the shallow features of the input clean image to the target image.After that,an adaptive control of the iteration step size is designed to improve the efficiency of the iteration and the transferability of the attack.Simultaneously,the idea of model hierarchy is introduced by using multiple models with different architectures as surrogate models,so that the generated adversarial examples have both multi-model features to improve the transferability of the attack.Finally,several models are tested on several remote sensing classification datasets,and the experimental results show that the proposed method is valid.

    Reference
    Related
    Cited by
Get Citation
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:
  • Revised:
  • Adopted:
  • Online: February 16,2025
  • Published:
Article QR Code