Surreptitious Adversarial Examples through Functioning QR Code
Issued Date
2022-05-01
Resource Type
eISSN
2313433X
Scopus ID
2-s2.0-85129711258
Journal Title
Journal of Imaging
Volume
8
Issue
5
Rights Holder(s)
SCOPUS
Bibliographic Citation
Journal of Imaging Vol.8 No.5 (2022)
Suggested Citation
Chindaudom A., Siritanawan P., Sumongkayothin K., Kotani K. Surreptitious Adversarial Examples through Functioning QR Code. Journal of Imaging Vol.8 No.5 (2022). doi:10.3390/jimaging8050122 Retrieved from: https://repository.li.mahidol.ac.th/handle/20.500.14594/84281
Title
Surreptitious Adversarial Examples through Functioning QR Code
Author's Affiliation
Other Contributor(s)
Abstract
The continuous advances in the technology of Convolutional Neural Network (CNN) and Deep Learning have been applied to facilitate various tasks of human life. However, security risks of the users’ information and privacy have been increasing rapidly due to the models’ vulnerabilities. We have developed a novel method of adversarial attack that can conceal its intent from human intuition through the use of a modified QR code. The modified QR code can be consistently scanned with a reader while retaining adversarial efficacy against image classification models. The QR adversarial patch was created and embedded into an input image to generate adversarial examples, which were trained against CNN image classification models. Experiments were performed to investigate the trade-off in different patch shapes and find the patch’s optimal balance of scannability and adversarial efficacy. Furthermore, we have investigated whether particular classes of images are more resistant or vulnerable to the adversarial QR attack, and we also investigated the generality of the adversarial attack across different image classification models.