Um Método Não Determinístico de Construção de Classificadores Baseados em Comitês para Proteção de Sistemas de Apoio à Decisão Contra Imagens Contraditórias: Um Estudo de Caso

• Gabriel R. Machado Instituto Militar de Engenharia (IME)
• Eugênio Silva Centro Universitário Estadual da Zona Oeste (UEZO)
• Ronaldo R. Goldschmidt Instituto Militar de Engenharia (IME)

Resumo

In recent years, Deep Learning has presented impressive performance when solving complex image classification and recognition tasks in decision support systems. Nonetheless, studies have demonstrated Deep Learning models are susceptible to attacks conducted with adversarial images, i.e. images containing subtle perturbations in order to induce models to misclassification. The main existing countermeasures against adversarial images have shown ineficiency, permitting attackers to map their internal operation more easily. Therefore, this work aims to evaluate a defense method called MultiMagNet which randomly incorporates at runtime multiple defense components, implemented as autoencoders, in order to introduce an expanded form of non-determinism behavior for hindering evasions of adversarial nature. Experiments on CIFAR-10 dataset showed MultiMagNet was able to detect images generated by different attack algorithms.

Palavras-chave: Adversarial Images, Information Systems Security, Decision Support Systems, Deep Learning