Image integrity analysis under defense approaches against adversarial patches

Adversarial patches pose a significant threat to image recognition systems, exploiting small, maliciously crafted patterns to mislead models into incorrect classifications. Unlike traditional adversarial examples, adversarial patches operate under real-world constraints, making defense against them a challenging task. This study introduces an alternative defense strategy that employs partial masking to mitigate the impact of adversarial patches without relying on precise patch detection. Various global masking patterns were evaluated to determine the best balance between adversarial robustness and image integrity. The proposed method effectively reduces attack success rates while maintaining reasonable classification accuracy, demonstrating its potential to ensure protection in real-world applications without dependency on the detection methods.

Authors

Institutions

Publication Details

Published
2025-02-05
DOI
https://doi.org/10.1117/12.3057960
Primary Topic
Image Processing Techniques and Applications
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Image integrity analysis under defense approaches against adversarial patches

Kasidit Chunhachatchawhankhun, Prarinya Siritanawan, Kazunori Kotani
Image Processing Techniques and Applications
article

Image integrity analysis under defense approaches against adversarial patches

Kasidit Chunhachatchawhankhun, Prarinya Siritanawan, Kazunori Kotani
article en

Abstract

Adversarial patches pose a significant threat to image recognition systems, exploiting small, maliciously crafted patterns to mislead models into incorrect classifications. Unlike traditional adversarial examples, adversarial patches operate under real-world constraints, making defense against them a challenging task. This study introduces an alternative defense strategy that employs partial masking to mitigate the impact of adversarial patches without relying on precise patch detection. Various global masking patterns were evaluated to determine the best balance between adversarial robustness and image integrity. The proposed method effectively reduces attack success rates while maintaining reasonable classification accuracy, demonstrating its potential to ensure protection in real-world applications without dependency on the detection methods.

Kanazawa University (JP), Japan Advanced Institute of Science and Technology (JP), Ōtani University (JP)
Openalex Percentile: Top 97%
Image Processing Techniques and Applications
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.