Adversarial examples (AEs) reveal critical misalignments between machine learning models and human perception. Unlike sensitivity-based AEs (SBAEs), which introduce imperceptible perturbations to fool models, invariance-based AEs (IBAEs) modify images in ways that change human classification while keeping the model’s prediction unchanged. Both, IBAEs and SBAEs expose that models rely on spurious correlations rather than true semantic understanding. To mitigate such misbehavior, AEs must be generated and analyzed in large numbers. Generating IBAEs is a complex problem and often relies on manual processes. We propose a scalable algorithm for generating IBAEs using explainable artificial intelligence (XAI) techniques. Our method strategically replaces semantically important regions of a base image with patches from an attack image, ensuring the model retains its original classification while human classification changes. An IBAE is considered successful when a majority of humans classify it differently from its original class. We validate our approach on the Imagenette dataset and Integrated Gradients and conducted a human study with 166 participants, demonstrating its effectiveness. The results demonstrate the successful generation of IBAEs and show that IBAEs can deceive time-constrained human labelers.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Scalable Generation of Invariance-Based Adversarial Examples Using XAI

  • Samuel Oberhofer,
  • Martin Nocker,
  • Florian Merkle,
  • Pascal Schöttle

摘要

Adversarial examples (AEs) reveal critical misalignments between machine learning models and human perception. Unlike sensitivity-based AEs (SBAEs), which introduce imperceptible perturbations to fool models, invariance-based AEs (IBAEs) modify images in ways that change human classification while keeping the model’s prediction unchanged. Both, IBAEs and SBAEs expose that models rely on spurious correlations rather than true semantic understanding. To mitigate such misbehavior, AEs must be generated and analyzed in large numbers. Generating IBAEs is a complex problem and often relies on manual processes. We propose a scalable algorithm for generating IBAEs using explainable artificial intelligence (XAI) techniques. Our method strategically replaces semantically important regions of a base image with patches from an attack image, ensuring the model retains its original classification while human classification changes. An IBAE is considered successful when a majority of humans classify it differently from its original class. We validate our approach on the Imagenette dataset and Integrated Gradients and conducted a human study with 166 participants, demonstrating its effectiveness. The results demonstrate the successful generation of IBAEs and show that IBAEs can deceive time-constrained human labelers.