Murdoch University Research Repository

Welcome to the Murdoch University Research Repository

The Murdoch University Research Repository is an open access digital collection of research
created by Murdoch University staff, researchers and postgraduate students.

Learn more

Efficient Detection of Pixel-Level Adversarial Attacks

Shah, S.A.A., Bougre, M., Akhtar, N., Bennamoun, M. and Zhang, L. (2020) Efficient Detection of Pixel-Level Adversarial Attacks. In: 2020 IEEE International Conference on Image Processing (ICIP), 25-28 Oct. 2020, Abu Dhabi, United Arab Emirates

Link to Published Version:
*Subscription may be required


Deep learning has achieved unprecedented performance in object recognition and scene understanding. However, deep models are also found vulnerable to adversarial attacks. Of particular relevance to robotics systems are pixel-level attacks that can completely fool a neural network by altering very few pixels (e.g. 1-5) in an image. We present the first technique to detect the presence of adversarial pixels in images for the robotic systems, employing an Adversarial Detection Network (ADNet). The proposed network efficiently recognize an input as adversarial or clean by discriminating the peculiar activation signals of the adversarial samples from the clean ones. It acts as a defense mechanism for the robotic vision system by detecting and rejecting the adversarial samples. We thoroughly evaluate our technique on three benchmark datasets including CIFAR-10, CIFAR-100 and Fashion MNIST. Results demonstrate effective detection of adversarial samples by ADNet.

Item Type: Conference Paper
Item Control Page Item Control Page