基於策略性操作增強圖像檢索系統之安全性以對抗後門攻擊;Enhancing Image Retrieval Security Against Backdoor Attacks Through Strategic Manipulations

NCUIR > College of Electrical Engineering & Computer Science > Graduate Institute of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/95849

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/95849

Title:	基於策略性操作增強圖像檢索系統之安全性以對抗後門攻擊;Enhancing Image Retrieval Security Against Backdoor Attacks Through Strategic Manipulations
Authors:	李泓磊;Lee, Hung-Lei
Contributors:	資訊工程學系
Keywords:	後門攻擊;資訊安全;深度學習;圖像檢索;Backdoor attacks;Security;Deep learning;Image retrieval
Date:	2024-09-11
Issue Date:	2024-10-09 17:20:09 (UTC+8)
Publisher:	國立中央大學
Abstract:	本研究提出了一種新穎的圖像檢索模型防禦機制，透過針對性的圖像轉換有效降低與後門攻擊相關的風險。利用如移除像素及水平翻轉等操作，並根據RISE技術生成的顯著圖動態調整策略，我們的方法破壞了嵌入圖像中的潛在觸發器。這些設置經過大量測試，以確保它們在不影響系統功能的情況下保持乾淨樣本的準確率。實驗結果表明，我們的防禦不僅優於傳統方法，還有效地對抗了先進的圖像檢索後門攻擊，大幅提升了圖像檢索系統的安全性。這種方法能夠讓圖像檢索系統運作不受影響，在正常操作條件下保持高精準度和功能性，並在不需要大規模重新訓練模型或更改系統設計的情況下有效地消除威脅。;This research introduces a novel defense mechanism for image retrieval models that effectively mitigates risks associated with backdoor attacks through targeted image transformations. By utilizing strategic techniques such as the removal of lines or columns of pixels and horizontal flipping, and dynamically adjusting transformations based on saliency maps generated by the RISE technique, our method disrupts potential triggers embedded within the images. These adaptations are refined through extensive testing to ensure they maintain the Mean Average Precision (MAP) of clean samples without adversely affecting system functionality. Experimental results demonstrate that our defense not only outperforms traditional methods but also effectively counteracts advanced image retrieval backdoor attacks, significantly enhancing the security of image retrieval systems. This approach allows the image retrieval system to operate efficiently, preserving high accuracy and functionality under normal operating conditions, and effectively neutralizing threats without extensive retraining or system redesign.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	30	View/Open

社群 sharing

Loading...