|国家预印本平台
首页|基于类别重构损失检测音频对抗样本的胶囊网络

基于类别重构损失检测音频对抗样本的胶囊网络

apsule network based on category reconstruction loss detection of audio adversarial examples

中文摘要英文摘要

人工智能系统在服务于人类的同时也遭受着安全威胁,其中对抗样本攻击扮演了主要角色之一,研究者为了消除对抗样本攻击的影响展开了各种方式的研究。胶囊网络被证实可以通过设置一个全局阈值θ,用来对比输入样本和重构样本之间的重构误差,以此来检测对抗样本,但是全局阈值θ有一定的问题,即判定不同类别的对抗样本时不准确,因此提出了一种基于类别的重构损失均值检测器,并提出一种由回声状态网络预测能力为基础的音频对抗样本攻击算法,最后经过实验验证提出的新型检测器的对抗样本检测能力,同时也验证了胶囊网络对于音频对抗样本的检测能力。

I systems are also suffering from security threats while serving human beings. Among them, anti-sample attacks play a major role. Researchers have carried out various ways of research in order to eliminate the impact of anti-sample attacks. The capsule network can be verified by setting a global threshold θ, It is used to compare the reconstruction error between the input sample and the reconstruction sample to detect the counter sample, but the global threshold θ There is a certain problem, that is, it is not accurate to determine different types of confrontation samples. Therefore, a class-based reconstruction loss mean detector is proposed, and an audio confrontation sample attack algorithm based on the prediction ability of echo state network is proposed. Finally, the experimental verification of the proposed new detector\'s detection ability of confrontation samples, and also verified the detection ability of capsule network for audio confrontation samples.

彭海朋、孟寅

电子对抗

胶囊网络、重构损失、对抗样本、回声状态网络

capsule network reconstruction loss counter sample echo state network

彭海朋,孟寅.基于类别重构损失检测音频对抗样本的胶囊网络[EB/OL].(2023-03-28)[2025-08-21].http://www.paper.edu.cn/releasepaper/content/202303-310.点此复制

评论