Image recognition attack method based on algorithm confrontational attack

Abstract

The invention relates to an image recognition attack method based on algorithm confrontational attack. The method includes inputting the original image needing to be identified and attacked into the adversarial generation network to obtain a resistance image, carrying out image identification and classification on the original image and the resistance image simultaneously, if the classification isthe same, indicating that the attack is unsuccessful, collecting data and updating the adversarial generation network, otherwise, indicating that the attack is successful. According to the method, anexisting image recognition algorithm can be attacked, the algorithm cannot carry out normal image recognition by generating a resistance sample, and therefore functional application in the fields offace recognition, image detection, automatic driving and the like is influenced, and the applicability is wide; once the training of the adversarial generation network is completed, the generated adversarial samples do not need to depend on the contact of a target model and a large number of numerical operations, and the characteristics of high efficiency and migration are achieved; research on the adversarial attack of machine learning is beneficial to further optimization of a machine learning algorithm and a data processing means, and the safety of the machine learning algorithm and the application thereof is improved.

Description

technical field [0001] The present invention relates to the technical field of computer systems based on a specific computing model, in particular to an image recognition attack method based on algorithmic adversarial attack that is efficient, widely applicable, transferable and secure. Background technique [0002] Machine learning is a learning model that specializes in how computers simulate or implement human learning behaviors to acquire new knowledge or skills, reorganize existing knowledge structures to continuously improve their performance, and is the core of artificial intelligence. The fundamental way of intelligence, its application in all fields of artificial intelligence. [0003] With the wide application of machine learning in various fields, the security issues of machine learning algorithms themselves also have a crucial impact on maintaining Internet security, such as face recognition errors in the field of image recognition, or automatic driving. Incorre...

AI Technical Summary

Problems solved by technology

[0006] The present invention solves the problem that in the prior art, there is no adversarial attack method that can be applied to all machine learning algorithms and maintain a high attack success rate in black box testing. The present invention provides an optimized algorithm-based Image recognition attack method for adversarial attack

Images