Image integrity analysis under defense approaches against adversarial patches
Adversarial patches pose a significant threat to image recognition systems, exploiting small, maliciously crafted patterns to mislead models into incorrect classifications. Unlike traditional adversarial examples, adversarial patches operate under real-world constraints, making defense against them a challenging task. This study introduces an alternative defense strategy that employs partial masking to mitigate the impact of adversarial patches without relying on precise patch detection. Various global masking patterns were evaluated to determine the best balance between adversarial robustness and image integrity. The proposed method effectively reduces attack success rates while maintaining reasonable classification accuracy, demonstrating its potential to ensure protection in real-world applications without dependency on the detection methods.
Authors
- Kasidit Chunhachatchawhankhun
- Prarinya Siritanawan (ORCID: https://orcid.org/0000-0002-9023-3208)
- Kazunori Kotani (ORCID: https://orcid.org/0000-0002-8960-1114)
Institutions
- Kanazawa University (JP)
- Japan Advanced Institute of Science and Technology (JP)
- Ōtani University (JP)
Publication Details
- Published
- 2025-02-05
- DOI
- https://doi.org/10.1117/12.3057960
- Primary Topic
- Image Processing Techniques and Applications
- Type
- article
- Field-Weighted Citation Impact
- 0.00