Poster Abstract: Mobile Vision Dynamic Layer Dropping against Adversarial Attacks

被引:0
作者
Ma, Zimo [1 ]
Luo, Xiangzhong [1 ,2 ]
Song, Qun [3 ]
Tan, Rui [1 ]
机构
[1] Nanyang Technol Univ, Singapore, Singapore
[2] Southeast Univ, Nanjing, Peoples R China
[3] Singapore Univ Technol & Design, Singapore, Singapore
来源
PROCEEDINGS OF THE 23RD ACM CONFERENCE ON EMBEDDED NETWORKED SENSOR SYSTEMS, SENSYS 2025 | 2025年
基金
新加坡国家研究基金会;
关键词
Adversarial defense; Dynamic layer dropping; Gumbel-Softmax;
D O I
10.1145/3715014.3724053
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Deep neural networks (DNNs) have achieved notable success in mobile vision tasks, yet they show vulnerability to adversarial attacks. When carefully crafted perturbations are introduced, these models can be easily misled into wrong classifications, posing significant risks for safety-critical mobile systems like autonomous vehicles. Although various defense strategies, both static and dynamic, have been proposed, many fail to address adaptive attacks or overlook the resource constraints of mobile systems. To address these limitations, in this paper, we present GuSoDrop, a lightweight dynamic defense framework that applies stochastic layer dropping. GuSoDrop leverages randomness to counteract adaptive attacks while selectively dropping less important layers to reduce computation overhead. Our preliminary evaluation shows that GuSoDrop outperforms state-of-the-art defense methods against different adaptive attacks and improves efficiency in reducing computational overhead.
引用
收藏
页码:64 / 65
页数:2
相关论文
共 8 条
[1]   Robust Physical-World Attacks on Deep Learning Visual Classification [J].
Eykholt, Kevin ;
Evtimov, Ivan ;
Fernandes, Earlence ;
Li, Bo ;
Rahmati, Amir ;
Xiao, Chaowei ;
Prakash, Atul ;
Kohno, Tadayoshi ;
Song, Dawn .
2018 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR), 2018, :1625-1634
[2]  
Goodfellow I., 2014, P ICLR, P1
[3]   Deep Residual Learning for Image Recognition [J].
He, Kaiming ;
Zhang, Xiangyu ;
Ren, Shaoqing ;
Sun, Jian .
2016 IEEE CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR), 2016, :770-778
[4]  
Madry A, 2019, Arxiv, DOI arXiv:1706.06083
[5]   Adversarial Attacks and Defenses in Deep Learning [J].
Ren, Kui ;
Zheng, Tianhang ;
Qin, Zhan ;
Liu, Xue .
ENGINEERING, 2020, 6 (03) :346-360
[6]  
Song Qun, 2022, P 2022 INT C EMBEDDE, P24
[7]  
Stallkamp J, 2011, 2011 INTERNATIONAL JOINT CONFERENCE ON NEURAL NETWORKS (IJCNN), P1453, DOI 10.1109/IJCNN.2011.6033395
[8]  
Wen Hao, 2023, P 29 ANN INT C MOB C, P1