AdvHaze: Adversarial Haze Attack
Ruijun Gao, Qing Guo, Felix Juefei-Xu, Hongkai Yu, Wei Feng

TL;DR
AdvHaze introduces a realistic haze-based adversarial attack method that effectively misleads neural network classifiers, demonstrating high success and transferability across models, thus advancing non-noise adversarial techniques.
Contribution
This paper presents a novel haze-based adversarial attack method grounded in atmospheric scattering models, expanding beyond traditional noise perturbations.
Findings
High attack success rate on ImageNet and NIPS 2017 datasets.
Better transferability across different models compared to baselines.
Visualization of correlation matrices suggests combining perturbations improves success.
Abstract
In recent years, adversarial attacks have drawn more attention for their value on evaluating and improving the robustness of machine learning models, especially, neural network models. However, previous attack methods have mainly focused on applying some norm-bounded noise perturbations. In this paper, we instead introduce a novel adversarial attack method based on haze, which is a common phenomenon in real-world scenery. Our method can synthesize potentially adversarial haze into an image based on the atmospheric scattering model with high realisticity and mislead classifiers to predict an incorrect class. We launch experiments on two popular datasets, i.e., ImageNet and NIPS~2017. We demonstrate that the proposed method achieves a high success rate, and holds better transferability across different classification models than the baselines. We also visualize the correlation…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Anomaly Detection Techniques and Applications · Advanced Neural Network Applications
