As a guest user you are not logged in or recognized by your IP address. You have
access to the Front Matter, Abstracts, Author Index, Subject Index and the full
text of Open Access publications.
Nowadays, the security of neural networks has attracted more and more attention. Adversarial examples are one of the problems that affect the security of neural networks. The gradient-based attack method is a typical attack method, and the Momentum Iterative Fast Gradient Sign Method (MI-FGSM) is a typical attack algorithm among the gradient-based attack algorithms. However, this method may suffer from the problems of excessive gradient growth and low efficiency. In this paper, we propose a gradient-based attack algorithm RMS-FGSM based on Root Mean Square Propagation (RMSProp). RMS-FGSM algorithm avoids excessive gradient growth by Exponential Weighted Moving Average method and adaptive learning rate when gradient updates. Experiments on MNIST and CIFAR-100 and several models show that the attack success rate of our approach is higher than the baseline methods. Above all, our generated adversarial examples have a smaller perturbation under the same attack success rate.
This website uses cookies
We use cookies to provide you with the best possible experience. They also allow us to analyze user behavior in order to constantly improve the website for you. Info about the privacy policy of IOS Press.
This website uses cookies
We use cookies to provide you with the best possible experience. They also allow us to analyze user behavior in order to constantly improve the website for you. Info about the privacy policy of IOS Press.