Abstract
In Autonomous driving detecting correct object is important, further studies proved that by adding small pattern above object can also lead intentional fooling of network. Small intentional changes in the input can significantly distort output of a deep neural network model. This makes the machine learned model vulnerable to these small changes in images. Hence, these models have wide scope of failure. If we are able to tackle these intentional attacks it will help to make system more robust.In this project, we have combined multiple techniques used for defending against adversarial attacks. First technique is Adversarial training which include modifying training dataset, second technique is pre-processing input data before applying it to deep learned model and Third technique randomly selects image pre-processing technique. Third method is aimed to distract attacker who know the method used in pre-processing by randomly selecting from multiple methods in image pre-processing.We will measure robustness of deep learned model in terms of Accuracy on Designed system and previous deep learned model. Test samples and adversarial images generated from dataset will be used for testing on deep learned model.Among all methods which we have combined, Adversarial training proved best method to defend against white box attack. If we would have used strong defences in Random selection of image transformation then the system could have performed much better. However, Random selection have done its work of confusing the attacker by selecting random transformations.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.