Robustness of Neural Networks: Adversarial Attacks and Defense Mechanisms
摘要
The study acknowledges whether the neural network is sufficiently robust against adversarial attacks and recommends defense mechanisms to strengthen their security and reliability. We used the activities of a Convolutional Neural Network (CNN) with the Modified National Institute of Standards and Technology (MNIST) dataset to analyze the effectiveness of adversarial training, input preprocessing, and regularization techniques. However, the obtained precision demonstrates that adversarial learning is more resistant to adversarial attacks, and there is a small overall improvement of up to 97%. Initially, we reduced the number of training parameters to 1%, but simultaneously, we significantly improved the resistance to adversarial attacks, achieving an accuracy of 45%. The Fast Gradient Sign Method (FGSM) defends the system before (6%) and after (42%) training. Projected Gradient Descent (PGD) is known to cause problems such as a 3% accuracy degradation for a model faced with an attack. The preprocessing phase techniques significantly improved adversarial attack reduction, achieving a success rate of 59%. FGSM attacks fail to identify 99% of the falsified pictures, whereas only 64% of the real pictures reveal their falsity. 6% against the PGD attacks. Another tool that helped make the carefully crafted neural network model more robust was the application of various regularization techniques, including label smoothing, which improved the accuracy of the model by up to 97%. Estimates place the greenhouse gas emissions from data centers at 3% of the total, while data transmission and storage consume a massive amount of 41%. FGSM attacks account for 5% of the success rate, whereas natural disasters contribute approximately 30%. 9% against the PGD attacks. Such evidence underscores the need to adopt a diverse array of defense mechanisms to enhance the resilience of neural networks against escalating threats.