Evaluation of Adversarial Noise Attacks on Ai Systems Using Image Processing Techniques
The resilience and dependability of AI systems have been seriously threatened by adversarial noise attacks, especially in image processing applications where accuracy and precision are crucial. This work examines the processes, effects, and efficacy of adversarial noise attacks across different AI models concentrating on the Fast Gradient Sign Method (FGSM) attack technique with different noise intensities of epsilon values between 0.1 and 0.5. We investigate how adversarial perturbations impair decision-making and model performance and evaluate five defense mechanisms which are Adversarial Training, Input Transformation, Defense Distillation, Gradient Masking and Randomization. The results reveal that adversarial training constantly improves resilience, achieving 100% accuracy under lower <tex xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">$\varepsilon$</tex> values. However, there is a trade-off between robustness and accuracy on clean dataset, and the computational cost of some defenses may limit their application in real-time system. This study highlights the important research gaps, such as the need for adaptive and hybrid strategies to enhance model resistance to adversarial attacks and suggests future research direction to strengthen AI security in practical applications.
Authors
- Kok Swee Sim (ORCID: https://orcid.org/0000-0003-2976-8825)
- Dong Lin Su (ORCID: https://orcid.org/0000-0003-2490-236X)
- Fazly Salleh Abas (ORCID: https://orcid.org/0000-0002-4308-131X)
Institutions
- Multimedia University (MY)
Publication Details
- Published
- 2025-05-24
- DOI
- https://doi.org/10.1109/iscaie64985.2025.11081093
- Primary Topic
- Adversarial Robustness in Machine Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.00