Analysis of the Impact of White Box Adversarial Attacks in ResNet While Classifying Retinal Fundus Images - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

Analysis of the Impact of White Box Adversarial Attacks in ResNet While Classifying Retinal Fundus Images

D. P. Bharath Kumar
  • Fonction : Auteur
  • PersonId : 1332824
Nanda Kumar
  • Fonction : Auteur
  • PersonId : 1332825
Snofy D. Dunston
  • Fonction : Auteur
  • PersonId : 1332826
V. Rajam
  • Fonction : Auteur
  • PersonId : 1332827

Résumé

Medical image analysis with deep learning techniques has been widely recognized to provide support in medical diagnosis. Among the several attacks on the deep learning (DL) models that aim to decrease the reliability of the models, this paper deals with the adversarial attacks. Adversarial attacks and the ways to defend the attacks or make the DL models robust towards these attacks have been an increasingly important research topic with a surge of work carried out on both sides. The adversarial attacks of the white box category, namely Fast Gradient Sign Method (FGSM), the Box-constrained Limited Memory Broyden-Fletcher-Goldfarb-Shanno (L-BFGS-B) attack and a variant of the L-BFGS-B attack are studied in this paper. In this work, we have used two defense mechanisms, namely, Adversarial Training and Defensive distillation-Gradient masking. The reliability of these defense mechanisms against the attacks are studied. The effect of noise in FGSM is studied in detail. Retinal fundus images for the diabetic retinopathy disease are used in the experimentation. The effect of the attack reveals the vulnerability of the Resnet model for these attacks.
Fichier sous embargo
Fichier sous embargo
0 7 12
Année Mois Jours
Avant la publication
mercredi 1 janvier 2025
Fichier sous embargo
mercredi 1 janvier 2025
Connectez-vous pour demander l'accès au fichier

Dates et versions

hal-04381279 , version 1 (09-01-2024)

Licence

Paternité

Identifiants

Citer

D. P. Bharath Kumar, Nanda Kumar, Snofy D. Dunston, V. Rajam. Analysis of the Impact of White Box Adversarial Attacks in ResNet While Classifying Retinal Fundus Images. 5th International Conference on Computational Intelligence in Data Science (ICCIDS), Mar 2022, Virtual, India. pp.162-175, ⟨10.1007/978-3-031-16364-7_13⟩. ⟨hal-04381279⟩
11 Consultations
1 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More