Imperceptible Adversarial Attack via Invertible Neural Networks: Paper and Code

Get our free extension to see links to code for papers anywhere online!Free add-on: code for papers everywhere!Free add-on: See code for papers anywhere!

Add to Chrome

Add to Firefox

Add to Edge

Imperceptible Adversarial Attack via Invertible Neural Networks

Dec 04, 2022
Zihan Chen, Ziyue Wang, Junjie Huang, Wentao Zhao, Xiao Liu, Dejian Guan

Figure 1 for Imperceptible Adversarial Attack via Invertible Neural Networks

Figure 2 for Imperceptible Adversarial Attack via Invertible Neural Networks

Figure 3 for Imperceptible Adversarial Attack via Invertible Neural Networks

Figure 4 for Imperceptible Adversarial Attack via Invertible Neural Networks

Share this with someone who'll enjoy it:

Adding perturbations via utilizing auxiliary gradient information or discarding existing details of the benign images are two common approaches for generating adversarial examples. Though visual imperceptibility is the desired property of adversarial examples, conventional adversarial attacks still generate traceable adversarial perturbations. In this paper, we introduce a novel Adversarial Attack via Invertible Neural Networks (AdvINN) method to produce robust and imperceptible adversarial examples. Specifically, AdvINN fully takes advantage of the information preservation property of Invertible Neural Networks and thereby generates adversarial examples by simultaneously adding class-specific semantic information of the target class and dropping discriminant information of the original class. Extensive experiments on CIFAR-10, CIFAR-100, and ImageNet-1K demonstrate that the proposed AdvINN method can produce less imperceptible adversarial images than the state-of-the-art methods and AdvINN yields more robust adversarial examples with high confidence compared to other adversarial attacks.

View paper on

Share this with someone who'll enjoy it: