FGSM Attack Impact on MNIST Classifiers via PyTorch Lightning

this research explores the vulnerability of convolutional neural networks (CNNs) to adversarial attacks, with a focus on the Fast Gradient Sign Method (FGSM) as a baseline threat model. The study utilizes the MNIST dataset, a standard benchmark for handwritten digit recognition, to evaluate the impact of FGSM perturbations on model performance. A structured experimentation pipeline was implemented using the PyTorch Lightning framework, chosen for its modular design, reproducibility, and ease of experimentation. A CNN was trained on clean MNIST data and evaluated on FGSM-adversarial inputs, resulting in a noticeable accuracy drop of up to 8.7%. This performance degradation highlights the model's sensitivity to small, intentional perturbations and underscores the need for robust defense mechanisms. Additionally, the experiments revealed a narrowing gap between clean and adversarial performance over training epochs, suggesting limited natural robustness. Overall, this study provides a reproducible baseline for assessing adversarial robustness in CNNs and demonstrates how modern deep learning frameworks can support secure and interpretable machine learning research.

Authors

Institutions

Publication Details

Published
2025-08-27
DOI
https://doi.org/10.1109/inecce64959.2025.11150836
Citations
1
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
2.48
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

FGSM Attack Impact on MNIST Classifiers via PyTorch Lightning

Elbren Antonio
1 citations
Adversarial Robustness in Machine Learning
2.48
article

FGSM Attack Impact on MNIST Classifiers via PyTorch Lightning

Elbren Antonio
article en
1 citations

Abstract

this research explores the vulnerability of convolutional neural networks (CNNs) to adversarial attacks, with a focus on the Fast Gradient Sign Method (FGSM) as a baseline threat model. The study utilizes the MNIST dataset, a standard benchmark for handwritten digit recognition, to evaluate the impact of FGSM perturbations on model performance. A structured experimentation pipeline was implemented using the PyTorch Lightning framework, chosen for its modular design, reproducibility, and ease of experimentation. A CNN was trained on clean MNIST data and evaluated on FGSM-adversarial inputs, resulting in a noticeable accuracy drop of up to 8.7%. This performance degradation highlights the model's sensitivity to small, intentional perturbations and underscores the need for robust defense mechanisms. Additionally, the experiments revealed a narrowing gap between clean and adversarial performance over training epochs, suggesting limited natural robustness. Overall, this study provides a reproducible baseline for assessing adversarial robustness in CNNs and demonstrates how modern deep learning frameworks can support secure and interpretable machine learning research.

Sultan Kudarat State University (PH)
Openalex Percentile: Top 9%
Adversarial Robustness in Machine Learning
2.48
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

FGSM Attack Impact on MNIST Classifiers via PyTorch Lightning — Elbren Antonio · (2025) | TGRS Research Map | TGRS