Skip to content
/ LGM Public

[TCSVT 2024] Dynamics-aware Adversarial Attack of Adaptive Neural Networks

License

Notifications You must be signed in to change notification settings

antao97/LGM

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

27 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Leaded Gradient Method (LGM)

[中文版]

This repository contains the PyTorch implementation for paper Dynamics-aware Adversarial Attack of Adaptive Neural Networks

Authors: An Tao, Yueqi Duan, Yingqi Wang, Jiwen Lu, Jie Zhou

[arxiv]

In this paper, we investigate the dynamics-aware adversarial attack problem of adaptive neural networks. Most existing adversarial attack algorithms are designed under a basic assumption -- the network architecture is fixed throughout the attack process. However, this assumption does not hold for many recently proposed adaptive neural networks, which adaptively deactivate unnecessary execution units based on inputs to improve computational efficiency. It results in a serious issue of lagged gradient, making the learned attack at the current step ineffective due to the architecture change afterward. To address this issue, we propose a Leaded Gradient Method (LGM) and show the significant effects of the lagged gradient.

If you find our work useful in your research, please consider citing our paper.

@article{tao2024dynamicsaware,
  title={Dynamics-aware Adversarial Attack of Adaptive Neural Networks},
  author={Tao, An and Duan, Yueqi and Yingqi, Wang and Lu, Jiwen and Zhou, Jie},
  journal={IEEE Transactions on Circuits and Systems for Video Technology},
  year={2024}
}

 

Updates:

  • [2024/01/04] Our paper is accepted by IEEE Transactions on Circuits and Systems for Video Technology!
  • [2023/10/31] Add attack code for 2D image classification.
  • [2023/06/20] Add attack code for 3D point cloud outdoor scene semantic segmentation.
  • [2022/10/17] The journal preprint version of this paper is available on arXiv.
  • [2022/05/20] Add attack code for 3D point cloud indoor scene semantic segmentation.

 

Contents

About

[TCSVT 2024] Dynamics-aware Adversarial Attack of Adaptive Neural Networks

Topics

Resources

License

Stars

Watchers

Forks

Languages