Efficient generation of adversarial examples and cross-channel quality optimization based on latent space distribution search
摘要
In response to the adversarial vulnerabilities of deep vision algorithms, existing security assessment methods often face problems such as low generation efficiency and severe visual distortion. It is urgent to explore a new paradigm for adversarial sample generation that takes into account high concealment and computational power economy. To this end, this paper aims to overcome the limitations of pixel-level iterative computation capabilities, eliminate biases in biological visual perception, and construct an adversarial example generation model based on latent space distribution search and cross-channel optimization techniques. This method uses a multi-layer convolutional auto-encoder as the base for dimensionality reduction, and maps the image matrix to a low-dimensional feature space for distribution search to extract adversarial priors. In terms of cross-channel quality optimization, by combining the human cone cell spectral sensing threshold and edge contour detection mask, perturbation isolation and precise location across color channels are implemented, and the counter-perturbation is covertly redistributed to visual low-sensitivity areas and high-frequency redundant areas. Experimental evaluation shows that this model maintains excellent visual fidelity while significantly reducing computing power overhead. The PSNR of adversarial samples reaches a maximum of 40.2 decibels. When the perturbation budget is increased to a standardized