Metrics for evaluating adversarial attack patterns

Savanna Smith; Shunta Muto; Anna Evans; Chris M. Ward; Josh Harguess; Emily Holt

doi:10.1117/12.2624452

27 May 2022 Metrics for evaluating adversarial attack patterns

Savanna Smith, Shunta Muto, Anna Evans, Chris M. Ward, Josh Harguess, Emily Holt

Proceedings Volume 12099, Geospatial Informatics XII; 120990D (2022) https://doi.org/10.1117/12.2624452
Event: SPIE Defense + Commercial Sensing, 2022, Orlando, Florida, United States

Abstract

The machine learning community has seen an explosion in the sophistication of adversarial attacks against deep neural network-based computer vision models. In particular, researchers have successfully used adversarial patterns to trigger false positive or false negative results in both research and real-world settings. However, researchers have not yet codified performance metrics for evaluating the efficacy of attack techniques. This evaluation is needed to adequately assess performance improvements of novel adversarial attack methods. This study aims to contribute the following: adversarial pattern performance metrics, demonstration of each metric’s strengths and contributions on a case study, and an initial standardized performance evaluation strategy for novel adversarial pattern attacks. We train state-of-the-art deep neural network-based object detection models on an open-source dataset. We then use these trained models to evaluate trained adversarial patterns for both false positive and false negative attacks and evaluate their performance using our suite of metrics in order to establish and codify a workflow to be used when evaluating future adversarial pattern algorithms.

Conference Presentation

Citation Download Citation

Savanna Smith, Shunta Muto, Anna Evans, Chris M. Ward, Josh Harguess, and Emily Holt "Metrics for evaluating adversarial attack patterns", Proc. SPIE 12099, Geospatial Informatics XII, 120990D (27 May 2022); https://doi.org/10.1117/12.2624452

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available