Despite significant advancements in deep learning, adversarial attacks remain a critical challenge, threatening the robustness and security of neural networks. Current models, including convolutional neural networks (CNNs), are still vulnerable to these attacks, and the development of effective defenses remains an open problem. While previous studies have primarily focused on transferability between models with different backbones, in this paper, we investigate the transferability and effectiveness of adversarial attacks between standard CNN architectures and dilated CNN architectures, as dilation is known for enhancing the efficiency of CNNs. Specifically, we evaluate two critical aspects: (1) whether dilated CNNs, when used defensively, exhibit enhanced resistance to adversarial attacks and (2) whether adversarial samples generated using dilated CNNs result in weaker or less transferable attacks. Using the Fast Gradient Sign Method (FGSM), we generate adversarial samples for multiple CNN and dilated CNN models, analyzing both direct attacks (targeting the same model) and cross attacks (targeting different architectures). Additionally, we vary the FGSM epsilon parameter to assess the impact of different attack strengths. The results of the evaluation indicate that dilated CNNs demonstrate partial resistance to attacks from standard CNNs, especially at higher dilation rates, but remain vulnerable overall. Conversely, adversarial samples generated using dilated CNNs are less effective when transferred to standard CNNs, highlighting a trade-off between efficiency, robustness, and adversarial susceptibility.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Investigating the Transferability and Robustness of Adversarial Attacks Between Standard and Dilated CNN Architectures

  • Sachin Sharma,
  • Jiho Noh,
  • Michail S. Alexiou

摘要

Despite significant advancements in deep learning, adversarial attacks remain a critical challenge, threatening the robustness and security of neural networks. Current models, including convolutional neural networks (CNNs), are still vulnerable to these attacks, and the development of effective defenses remains an open problem. While previous studies have primarily focused on transferability between models with different backbones, in this paper, we investigate the transferability and effectiveness of adversarial attacks between standard CNN architectures and dilated CNN architectures, as dilation is known for enhancing the efficiency of CNNs. Specifically, we evaluate two critical aspects: (1) whether dilated CNNs, when used defensively, exhibit enhanced resistance to adversarial attacks and (2) whether adversarial samples generated using dilated CNNs result in weaker or less transferable attacks. Using the Fast Gradient Sign Method (FGSM), we generate adversarial samples for multiple CNN and dilated CNN models, analyzing both direct attacks (targeting the same model) and cross attacks (targeting different architectures). Additionally, we vary the FGSM epsilon parameter to assess the impact of different attack strengths. The results of the evaluation indicate that dilated CNNs demonstrate partial resistance to attacks from standard CNNs, especially at higher dilation rates, but remain vulnerable overall. Conversely, adversarial samples generated using dilated CNNs are less effective when transferred to standard CNNs, highlighting a trade-off between efficiency, robustness, and adversarial susceptibility.