Home > Research > Publications & Outputs > Fuzzy Detectors Against Adversarial Attacks

Electronic data

  • SSCI

    Accepted author manuscript, 1.54 MB, PDF document

    Available under license: CC BY-NC: Creative Commons Attribution-NonCommercial 4.0 International License

Links

Text available via DOI:

View graph of relations

Fuzzy Detectors Against Adversarial Attacks

Research output: Contribution in Book/Report/Proceedings - With ISBN/ISSNConference contribution/Paperpeer-review

Forthcoming
Publication date15/09/2023
Host publication2023 IEEE Symposium Series on Computational Intelligence
Place of PublicationMexico
PublisherIEEE
Pages306-311
Number of pages6
ISBN (electronic)9781665430654
<mark>Original language</mark>English
Event2023 IEEE Symposium Series on Computational Intelligence, SSCI 2023 - Mexico City, Mexico
Duration: 5/12/20238/12/2023

Conference

Conference2023 IEEE Symposium Series on Computational Intelligence, SSCI 2023
Country/TerritoryMexico
CityMexico City
Period5/12/238/12/23

Conference

Conference2023 IEEE Symposium Series on Computational Intelligence, SSCI 2023
Country/TerritoryMexico
CityMexico City
Period5/12/238/12/23

Abstract

Deep learning-based methods have proved useful for adversarial attack detection. However, conventional detection algorithms exploit crisp set theory for classification boundary. Therefore, representing vague concepts is not available. Motivated by the recent success in fuzzy systems, we propose a fuzzy rule-based neural network to improve adversarial attack detection accuracy. The pre-trained ImageNet model is exploited to extract feature maps from clean and attacked images. Subsequently, the fuzzification network is used to obtain feature maps to produce fuzzy sets of difference degrees between clean and attacked images. The fuzzy rules control the intelligence that determines the detection boundaries. In the defuzzification layer, the fuzzy prediction from the intelligence is mapped back into the crisp model predictions for images. The loss between the prediction and label controls the rules to train the fuzzy detector. We show that the fuzzy rule-based network learns rich feature information than binary outputs and offers to obtain an overall performance gain. Our experiments, conducted over a wide range of images, show that the proposed method consistently performs better than conventional crisp set training in adversarial attack detection with various fuzzy system-based neural networks.