Alert button

Interpreting Attributions and Interactions of Adversarial Attacks

Add code
Alert button
Aug 16, 2021
Figure 1 for Interpreting Attributions and Interactions of Adversarial Attacks
Figure 2 for Interpreting Attributions and Interactions of Adversarial Attacks
Figure 3 for Interpreting Attributions and Interactions of Adversarial Attacks
Figure 4 for Interpreting Attributions and Interactions of Adversarial Attacks

Share this with someone who'll enjoy it:

This paper aims to explain adversarial attacks in terms of how adversarial perturbations contribute to the attacking task. We estimate attributions of different image regions to the decrease of the attacking cost based on the Shapley value. We define and quantify interactions among adversarial perturbation pixels, and decompose the entire perturbation map into relatively independent perturbation components. The decomposition of the perturbation map shows that adversarially-trained DNNs have more perturbation components in the foreground than normally-trained DNNs. Moreover, compared to the normally-trained DNN, the adversarially-trained DNN have more components which mainly decrease the score of the true category. Above analyses provide new insights into the understanding of adversarial attacks.

Share this with someone who'll enjoy it: