基于RSA的图像可识别对抗攻击方法  

RSA-based image recognizable adversarial attack method

作　　者：张宇[1] 李海良 ZHANG Yu;LI Hailiang(Jinan University,Guangzhou 510632,China)

机构地区：[1]暨南大学,广东广州510632

出　　处：《网络与信息安全学报》2021年第5期40-48,共9页Chinese Journal of Network and Information Security

基　　金：广东省重点研发计划(2020B0101090004);广东省科技创新战略专项资金(pdjh2021b0058)。

摘　　要：基于密码学中的RSA签名方案与RSA加密方案,提出了一种能够让特定分类器输出对抗样本正确分类的对抗攻击方法。通过单像素攻击的思想使正常图像在嵌入附加信息的同时能够具有让其余分类器发生错误分类的能力。所提方法可以应用在分类器授权管理与在线图像防伪等领域。实验结果表明,所提方法生成的对抗样本对于人眼难以察觉,并能被特定分类器识别。Adversarial attack is an important part of deep learning security research.Relying on the RSA signature schemes and RSA encryption schemes in cryptography,an adversarial attack method that adversarial examples can be recognized by a specific classifier is proposed.Through the idea of one pixel attack,the normal image can have the ability to make other classifier misclassify while embedding additional information.It can be used in classifier authorization management,online image anti-counterfeiting,etc.The experiment show that the adversarial examples can be recognized under the specific classifier,and the disturbance noise is difficult to detect by the human eye.

关 键 词：对抗攻击 签名方案 加密方案 密码学 分类器 图像识别 

分 类 号：TP181[自动化与计算机技术—控制理论与控制工程]