Laser & Optoelectronics Progress, Volume. 59, Issue 12, 1210004(2022)
Image Defense Algorithm Against Adversarial Attacks Based on Low-Rank Dimensionality Reduction and Sparse Reconstruction
There is a type of weak and imperceptible adversarial perturbation, which can change the output of a deep neural network in computer vision tasks such as image classification. A defense algorithm against adversarial attacks based on low-rank dimensionality reduction and sparse reconstruction is proposed to target adversarial perturbation in image classification. Because digital images are low-rank and sparse, the proposed algorithm uses low-rank decomposition to reduce adversarial perturbation. The low-rank approximated image is then subjected to multiscale sparse coding to remove residual perturbation and restore the original image’s rich textural details. Three attack algorithms are used to compare the proposed algorithm’s defense effect against the other four defense algorithms under black-box and gray-box attacks. The results show that the proposed algorithm processes adversarial images with the highest Top-1 accuracy of image classification compared to comparative algorithms and that the proposed algorithm is more robust.
Get Citation
Copy Citation Text
Xifan Zhang, Lingzhi Yu. Image Defense Algorithm Against Adversarial Attacks Based on Low-Rank Dimensionality Reduction and Sparse Reconstruction[J]. Laser & Optoelectronics Progress, 2022, 59(12): 1210004
Category: Image Processing
Received: Apr. 27, 2021
Accepted: Jun. 2, 2021
Published Online: May. 23, 2022
The Author Email: Xifan Zhang (lawalimu@163.com)