空军工程大学学报2025，Vol.26Issue(1)：32-41,10.DOI:10.3969/j.issn.2097-1915.2025.01.005
改进的Mixup方法定向攻击图像分类模型
An Improved Mixup Attack for Directed Attack Image Classification Models
摘要
Abstract
In this paper,a directional attack black-box attack method named improved mixup attack(IMA)method is designed aimed at the current problems that researches on adversarial examples of targeted at-tacks are less,and black-box attack capability is very weak in remote sensing image classification.The method aims to directionally fool the classification model out of the deep neural network,discover its vul-nerable parts,and enable our high-value target to be detected as a low or no-value target.The method,first-ly,is used to extract the shallow global features of the image by an image classification deep learning mod-el,and is used to realize the targeted attack for changing the input image pixels to approximate the shallow features of the input clean image to the target image.After that,an adaptive control of the iteration step size is designed to improve the efficiency of the iteration and the transferability of the attack.Simultaneous-ly,the idea of model hierarchy is introduced by using multiple models with different architectures as surro-gate models,so that the generated adversarial examples have both multi-model features to improve the transferability of the attack.Finally,several models are tested on several remote sensing classification data-sets,and the experimental results show that the proposed method is valid.关键词
图像分类/有目标攻击/遥感图像/模型级联Key words
image classification/targeted attack/remote sensing image/model hierarchy分类
信息技术与安全科学引用本文复制引用
朱瑞,马时平,何林远,梅少辉..改进的Mixup方法定向攻击图像分类模型[J].空军工程大学学报,2025,26(1):32-41,10.基金项目
国家自然科学基金(62171381) （62171381）
