Search
Abstract
Deep learning suffers from the threat of adversarial attacks, and its defense methods have become a research hotspot. In all applications of deep learning, intelligent driving is an important and promising one, facing serious threat of adversarial attack in the meanwhile. To address the adversarial attack, this paper takes the traffic sign recognition as a typical object, for it is the core function of intelligent driving. Considering that the black box attack does not need to know the internal characteristics of the model, it can have more practical value. However, the existing black box attack algorithm has high visit time and low efficiency in attacking sample generation. In this regard, the SimBA algorithm with high efficiency is selected and improved according to the characteristics of traffic signs, named the L-SimBA algorithm. According to the graphic characteristics of traffic signs that are already known, L-SimBA algorithm limits the search subspace consciously and specifies the set of search directions, and that is the core idea of it. By this way, L-SimBA algorithm can generate adversarial samples faster. Experimental comparison shows that in the field of traffic sign recognition, L-SimBA algorithm is better than SimBA algorithm. On the premise of obtaining similar quality adversarial attack samples, the success rate of adversarial measures gets higher, and the number of model visits reduces considerably, thus the attack efficiency of the algorithm improves greatly
Citations
-
2
CrossRef
-
0
Web of Science
-
3
Scopus
Authors (5)
-
Juan Wang
- Chengdu University, China
-
Lei Shi
- Chengdu University, China
-
Yang Zhao
- Chengdu University, China
-
Haoxi Zhang
- Chengdu University, China
-
Edward Szczerbicki prof. dr hab. inż.
Cite as
Full text
full text is not available in portal
Keywords
Details
- Category:
- Articles
- Type:
- artykuły w czasopismach
- Published in:
-
MULTIMEDIA TOOLS AND APPLICATIONS
ISSN: 1380-7501 - Language:
- English
- Publication year:
- 2022
- Bibliographic description:
- Wang J., Shi L., Zhao Y., Zhang H., Szczerbicki E.: Adversarial attack algorithm for traffic sign recognition// MULTIMEDIA TOOLS AND APPLICATIONS -, (2022),
- DOI:
- Digital Object Identifier (open in new tab) 10.1007/s11042-022-14067-5
- Sources of funding:
-
- COST_FREE
- Verified by:
- Gdańsk University of Technology
seen 61 times
Recommended for you
Experience-Based Cognition for Driving Behavioral Fingerprint Extraction
- H. Zhang,
- F. Li,
- J. Wang
- + 3 authors
Deep Learning-Based Intrusion System for Vehicular Ad Hoc Networks
- L. Fei,
- Z. Jiayan,
- S. Jiaqi
- + 1 authors