…
comment: The repository administrator has not yet configured an RDF license.
primary topic: Analysis of Adversarial Examples

Analysis of Adversarial Examples
type: Article
abstract: The rise of artificial intelligence (AI) has significantly impacted the field of computer vision (CV). In particular, deep learning (DL) has advanced the development of algorithms that comprehend visual data. In specific tasks, DL exhibits human capabilities and is impacting our everyday lives such as virtual assistants, entertainment or web searches. Despite of the success of visual algorithms, in this thesis we study the threat adversarial examples, which are input manipulation to let to misclassifcation. The human vision system is not impaired and can classify the correct image, while for a DL classifier one pixel change is enough for misclassification. This is a misalignment between the human and CV system. Therefore, we start this work by presenting the concept of an classification model to understand how these models can be tricked by the threat model – adversarial examples. Then, we analyze the adversarial examples in the Fourier domain, because after this transformation they can be better identified for detection. To that end, we assess different adversarial attacks on various classification models and datasets deviating from the standard benchmarks As a complementary approach, we developed an anti-pattern utilizing a frame-like patch (prompt) on the input image to counteract the input manipulation. Instead of merely identifying and discarding adversarial inputs, this prompt neutralizes adversarial perturbations during testing. As another detection method, we expanded the use of a characteristics of multi-dimensional data – the local intrinsic dimensionality (LID) to differentiate between benign and attacked images, improving detection rates of adversarial examples. Recent advances in diffusion models (DMs) have significantly improved the robustness of adversarial models. Although DMs are well-known for their generative abilities, it remains unclear whether adversarial examples are part of the learned distribution of the DM. To address this gap, we propose a…
date: 2024
author list: authors
type: EPrint
type: DoctoralThesisEPrint
is part of: repository
has document: Analysis of Adversarial Examples (PDF)
has document: Analysis of Adversarial Examples (Other)
subject: 004 Informatik

Analysis of Adversarial Examples (PDF)
type: Document
has file: main.pdf
has part: main.pdf

Peter Lorenz
type: Person
given name: Peter
family name: Lorenz

Analysis of Adversarial Examples (Other)
type: Document
is version of: Analysis of Adversarial Examples (PDF)
is volatile version of: Analysis of Adversarial Examples (PDF)
is index codes version of: Analysis of Adversarial Examples (PDF)
has file: indexcodes.txt
has part: indexcodes.txt

Analysis of Adversarial Examples (Other)
type: Document
is version of: Analysis of Adversarial Examples (PDF)
is volatile version of: Analysis of Adversarial Examples (PDF)
islightbox thumbnail version of: Analysis of Adversarial Examples (PDF)
has file: lightbox.jpg
has part: lightbox.jpg

Analysis of Adversarial Examples (Other)
type: Document
is version of: Analysis of Adversarial Examples (PDF)
is volatile version of: Analysis of Adversarial Examples (PDF)
ispreview thumbnail version of: Analysis of Adversarial Examples (PDF)
has file: preview.jpg
has part: preview.jpg

Analysis of Adversarial Examples (Other)
type: Document
is version of: Analysis of Adversarial Examples (PDF)
is volatile version of: Analysis of Adversarial Examples (PDF)
ismedium thumbnail version of: Analysis of Adversarial Examples (PDF)
has file: medium.jpg
has part: medium.jpg

Analysis of Adversarial Examples (Other)
type: Document
is version of: Analysis of Adversarial Examples (PDF)
is volatile version of: Analysis of Adversarial Examples (PDF)
issmall thumbnail version of: Analysis of Adversarial Examples (PDF)
has file: small.jpg
has part: small.jpg

HTML Summary of #35211 Analysis of Adversarial Examples
format: text/html
primary topic: Analysis of Adversarial Examples

004 Informatik
type: Concept
preferred label: 004 Data processing Computer science @en