Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. SparseFool: a few pixels make a big difference
 
conference paper

SparseFool: a few pixels make a big difference

Modas, Apostolos  
•
Moosavi Dezfooli, Seyed Mohsen  
•
Frossard, Pascal  
2019
Proceedings of IEEE Conference on Computer Vision and Pattern Recognition (CVPR)
IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

Deep Neural Networks have achieved extraordinary results on image classification tasks, but have been shown to be vulnerable to attacks with carefully crafted perturbations of the input data. Although most attacks usually change values of many image's pixels, it has been shown that deep networks are also vulnerable to sparse alterations of the input. However, no computationally efficient method has been proposed to compute sparse perturbations. In this paper, we exploit the low mean curvature of the decision boundary, and propose SparseFool, a geometry inspired sparse attack that controls the sparsity of the perturbations. Extensive evaluations show that our approach computes sparse perturbations very fast, and scales efficiently to high dimensional data. We further analyze the transferability and the visual effects of the perturbations, and show the existence of shared semantic information across the images and the networks. Finally, we show that adversarial training can only slightly improve the robustness against sparse additive perturbations computed with SparseFool.

  • Details
  • Metrics
Type
conference paper
DOI
10.1109/CVPR.2019.00930
ArXiv ID

1811.02248

Author(s)
Modas, Apostolos  
Moosavi Dezfooli, Seyed Mohsen  
Frossard, Pascal  
Date Issued

2019

Publisher

IEEE

Published in
Proceedings of IEEE Conference on Computer Vision and Pattern Recognition (CVPR)
ISBN of the book

978-1-7281-3293-8

Start page

9079

End page

9088

Subjects

ml-tm

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
LTS4  
Event nameEvent placeEvent date
IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)

Long Beach, California, USA

2019

Available on Infoscience
February 27, 2019
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/154839
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés