The invention relates to the technical field of
image processing. The invention discloses an
image processing method for resisting attacks, which comprises the following steps of: a, collecting gradient information of an image x through a local known model; b, introducing a step size
amplification factor to amplify the gradient of each step in the iterative
processing process, and updating the accumulative amplification gradient at the same time; c, if the cumulative amplification gradient exceeds a set threshold range,
cutting noise C is obtained, and otherwise, C is 0; and d, performing projection by using a projection kernel function Wp, uniformly projecting the
cutting noise C to the surrounding area of the image x, and adding the amplification gradient of the current step to obtain asample image. The method is a regional-level
attack resisting technology, and provides a new thought for the research of a deep neural network. The adversarial
sample image has stronger migration capability, and can better
attack unknown
black box models to enable the unknown
black box models to generate misclassification. The technical scheme of the invention can be easily combined with many other
attack methods so as to generate an adversarial
sample image with stronger attack capability.