Adversarial attack-based security vulnerability verification using deep learning library for multimedia video surveillance

被引:0
作者
JaeHan Jeong
Sungmoon Kwon
Man-Pyo Hong
Jin Kwak
Taeshik Shon
机构
[1] Ajou University,
来源
Multimedia Tools and Applications | 2020年 / 79卷
关键词
Autoencoder; Security; Deep learning; CNN; MNIST; NSL-KDD; Adversarial attack;
D O I
暂无
中图分类号
学科分类号
摘要
Recently, although deep learning has been employed in various fields, it poses the risk of a possible adversarial attack. In this study, we experimentally verified that classification accuracy in the image classification model of deep learning is lowered by adversarial samples generated by malicious attackers. We used the MNIST dataset, a representative image sample, and the NSL-KDD dataset, a representative network data. We measured the detection accuracy by injecting adversarial samples into the Autoencoder and Convolution Neural Network (CNN) classification models created using the TensorFlow and PyTorch libraries. Adversarial samples were generated by transforming the MNIST and NSL-KDD test datasets using the Jacobian-based Saliency Map Attack (JSMA) method and Fast Gradient Sign Method (FGSM). While measuring the accuracy by injecting the samples into the classification model, we verified that the detection accuracy was reduced by a minimum of 21.82% and a maximum of 39.08%.
引用
收藏
页码:16077 / 16091
页数:14
相关论文
共 11 条
  • [1] Finlayson SG(2018)Adversarial attacks against medical deep learning systems arXiv preprint arXiv 1804.05296-3408
  • [2] Kohane IS(2014)Explaining and harnessing adversarial examples arXiv preprint arXiv 1412.6572-undefined
  • [3] Beam AL(2016)Adversarial examples in the physical world arXiv preprint arXiv 1607.02533-undefined
  • [4] Goodfellow IJ(2016)Cleverhans v2. 0.0: an adversarial machine learning library arXiv preprint arXiv 1610.00768-undefined
  • [5] Shlens J(2010)Stacked denoising autoencoders: learning useful representations in a deep network with a local denoising criterion J Mach Learn Res 11 3371-undefined
  • [6] Szegedy C(undefined)undefined undefined undefined undefined-undefined
  • [7] Kurakin A(undefined)undefined undefined undefined undefined-undefined
  • [8] Goodfellow I(undefined)undefined undefined undefined undefined-undefined
  • [9] Bengio S(undefined)undefined undefined undefined undefined-undefined
  • [10] Papernot N(undefined)undefined undefined undefined undefined-undefined