Metamorphic Detection of Adversarial Examples in Deep Learning Models With Affine Transformations

  • 2019-07-10 15:04:18
  • Rohan Reddy Mekala, Gudjon Einar Magnusson, Adam Porter, Mikael Lindvall, Madeline Diep
  • 5


Adversarial attacks are small, carefully crafted perturbations, imperceptibleto the naked eye; that when added to an image cause deep learning models tomisclassify the image with potentially detrimental outcomes. With the rise ofartificial intelligence models in consumer safety and security intensiveindustries such as self-driving cars, camera surveillance and face recognition,there is a growing need for guarding against adversarial attacks. In thispaper, we present an approach that uses metamorphic testing principles toautomatically detect such adversarial attacks. The approach can detect imagemanipulations that are so small, that they are impossible to detect by a humanthrough visual inspection. By applying metamorphic relations based on distanceratio preserving affine image transformations which compare the behavior of theoriginal and transformed image; we show that our proposed approach candetermine whether or not the input image is adversarial with a high degree ofaccuracy.


Quick Read (beta)

This feature is not avaialbe for this paper.