Leveraging Generalizability of Image-to-Image Translation for Enhanced Adversarial Defense
摘要
In the rapidly advancing domain of artificial intelligence, machine learning stands out as a crucial technology, notable for its immense potential and associated risks. The stability and reliability of these models are important, given that they are often aimed at by security threats. Adversarial attacks, which were initially thoroughly defined by Ian Goodfellow et al. in 2013, highlight a significant vulnerability: they can trick machine learning models into making incorrect predictions by applying nearly invisible perturbations to images. Although many studies have focused on constructing sophisticated defensive mechanisms to mitigate such attacks, they often overlook the substantial time and computational costs of training and maintaining these models. In an ideal scenario, a defense method should be able to mechanism ought to effectively generalize across different, including previously un-encountered, adversarial attacks while maintaining minimal overhead. Building on our previous work on image-to-image translation-based defenses, this study introduces an improved model that incorporates residual blocks to enhance generalizability. The proposed method requires training only a single model, effectively defends against diverse attack types, and is well-transferable between different target models. Experiments show that our model can restore the classification accuracy from near zero to an average of 72% while maintaining competitive performance compared to state-of-the-art methods. Significantly, our model operates more efficiently, reducing the time needed to process individual images and speeding up the training process to achieve faster convergence. Robustness tests further confirm stable performance under varying attack strengths, demonstrating the model’s practical value in real-world adversarial settings. The code is avaible at https://github.com/Haiboz0105/img2imgAdvDef.