Adversarial Attack
摘要
This chapter introduces the relevant concepts of adversarial attacks and presents related examples. It elaborates in detail on the principles of three common types of attack algorithms, namely optimization-based, gradient-based, and generation-based algorithms. Moreover, it explains the principles of common defense algorithms such as defense distillation, adversarial training, denoising networks, and adversarial sample detectors. Subsequently, in terms of the application of GAN attacks, three GAN-based adversarial sample generation models are introduced, including Perceptual-Sensitive GAN, Natural GAN, and AdvGAN. Regarding the defense of GANs, taking APE-GAN as an example, its defensive effect is demonstrated. Finally, a practical introduction to the widely used open-source tool AdvBox is provided.