Who's Afraid of Adversarial Queries? The Impact of Image Modifications on Content-based Image Retrieval
Zhuoran Liu, Zhengyu Zhao, Martha Larson

TL;DR
This paper introduces PIRE, an unsupervised neural perturbation method that effectively disrupts content-based image retrieval systems, highlighting new challenges and considerations for future multimedia research.
Contribution
The paper presents PIRE, a novel unsupervised neural approach to generate adversarial queries that block neural-feature-based CBIR without requiring labeled data.
Findings
PIRE effectively blocks neural-feature-based CBIR.
It performs comparably or better than keypoint modification methods.
Practical considerations include image quality and background leakage.
Abstract
An adversarial query is an image that has been modified to disrupt content-based image retrieval (CBIR) while appearing nearly untouched to the human eye. This paper presents an analysis of adversarial queries for CBIR based on neural, local, and global features. We introduce an innovative neural image perturbation approach, called Perturbations for Image Retrieval Error (PIRE), that is capable of blocking neural-feature-based CBIR. PIRE differs significantly from existing approaches that create images adversarial with respect to CNN classifiers because it is unsupervised, i.e., it needs no labelled data from the data set to which it is applied. Our experimental analysis demonstrates the surprising effectiveness of PIRE in blocking CBIR, and also covers aspects of PIRE that must be taken into account in practical settings, including saving images, image quality and leaking adversarial…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Advanced Image and Video Retrieval Techniques · Domain Adaptation and Few-Shot Learning
