With the importance of machine learning rising over the years, learners have been perfected according to their performance on unseen data without considering that the data to be classified could be actively manipulated by an adversary to cause misinterpretations. In this work, we propose to attack the certainty of models. We consider this an important attack angle, as a lot of countermeasures for detection rely on certainty metrics. The new aspect of this paper is that we optimized our attack on four key aspects: The success rate, confidence in the misclassification, transferability of attacks to other models, and the image quality of the generated adversarial. We are introducing this as a means to improve attacks in general regarding key aspects such as certainty of the attack and other desirable attack metrics that do not limit themselves to accuracy. The code can be found at https://github.com/KDD-OpenSource/Certainty-Attacks.git .

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Certainty Attacks Using Explainability Preprocessing

  • Carina Newen,
  • Sofia Vergara Puccini,
  • Emmanuel Müller

摘要

With the importance of machine learning rising over the years, learners have been perfected according to their performance on unseen data without considering that the data to be classified could be actively manipulated by an adversary to cause misinterpretations. In this work, we propose to attack the certainty of models. We consider this an important attack angle, as a lot of countermeasures for detection rely on certainty metrics. The new aspect of this paper is that we optimized our attack on four key aspects: The success rate, confidence in the misclassification, transferability of attacks to other models, and the image quality of the generated adversarial. We are introducing this as a means to improve attacks in general regarding key aspects such as certainty of the attack and other desirable attack metrics that do not limit themselves to accuracy. The code can be found at https://github.com/KDD-OpenSource/Certainty-Attacks.git .