V-PSC: a Perturbation-Based Causative Attack Against DL Classifiers' Supply Chain in VANET

被引：1

作者：

Zeng, Yi ^{[1
]}

Qiu, Meikang ^{[2
]}

Niu, Jingqi ^{[1
]}

Long, Yanxin ^{[1
]}

Xiong, Jian ^{[3
]}

Liu, Meiqin ^{[4
]}

机构：

[1] Xidian Univ, Xian, Peoples R China

[2] Harrisburg Univ Sci & Technol, Dept Comp Sci, Harrisburg, PA 17101 USA

[3] Shanghai Jiao Tong Univ, Shanghai, Peoples R China

[4] Zhejiang Univ, Coll Elect Engn, Hangzhou, Zhejiang, Peoples R China

来源：

2019 22ND IEEE INTERNATIONAL CONFERENCE ON COMPUTATIONAL SCIENCE AND ENGINEERING (IEEE CSE 2019) AND 17TH IEEE INTERNATIONAL CONFERENCE ON EMBEDDED AND UBIQUITOUS COMPUTING (IEEE EUC 2019) | 2019年

关键词：

VANET; Perturbation; Causative Attack; Deep Learning;

D O I：

10.1109/CSE/EUC.2019.00026

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

DL Based classifiers can attain a higher accuracy with less storage requirement, which suits perfectly with the VANET. However, it has been proved that DL models suffer from crafted perturbation data, a small amount of such can misguide the classifier, thus backdoors can be created for malicious reasons. This paper studies such a causative attack in the VANET. We present a perturbation-based causative attack which targets at the supply chain of DL classifiers in the VANET. We first train a classifier using VANET simulated data which meets the standard accuracy for identifying malicious traffic in the VANET. Then, we elaborate on the effectiveness of our presented attack scheme on this pre-trained classifier. We also explore some feasible approaches to ease the outcome brought by our attack. Experimental results show that the scheme can cause the target DL model a 10.52% drop in accuracy.

引用

页码：86 / 91

页数：6