Fast Gradient Sign Method • Goodfellow et al. proposed the Fast Gradient Sign Method FGSM
10
Basic Iterative Method
11
Carlini-Wagner Attack
12
Problems and Challenges
13
Other Problems
14
Contributions
15
Trust Region Optimization
16
Updating the Trust Region
17
Trust region example - Initial Start
18
Iteration 1
19
Final Trajectory after 20 iterations
20
Proposed Method
21
Metrics
22
Types of attacks used
23
Summary of setup
24
Time Performance on ImageNet
25
Qualitative Results
26
ImageNet Results
27
Second order attack results
28
Conclusion
Description:
Explore a comprehensive lecture on trust region-based adversarial attacks on neural networks, presented by the University of Central Florida. Delve into various aspects of adversarial attacks, including 3D objects, physical attacks on traffic signs, and adversarial patches for person detection. Learn about semantic segmentation, object detection, and LIDAR attacks. Understand key concepts such as Fast Gradient Sign Method, Basic Iterative Method, and Carlini-Wagner Attack. Discover the challenges in the field and the proposed solutions using trust region optimization. Examine the metrics, types of attacks, and experimental setup used in the study. Analyze time performance on ImageNet, qualitative results, and second-order attack outcomes. Gain valuable insights into this critical area of machine learning security in this 32-minute presentation.
Trust Region Based Adversarial Attack on Neural Networks