English

Semantically Adversarial Learnable Filters

Computer Vision and Pattern Recognition 2022-04-07 v3 Machine Learning

Abstract

We present an adversarial framework to craft perturbations that mislead classifiers by accounting for the image content and the semantics of the labels. The proposed framework combines a structure loss and a semantic adversarial loss in a multi-task objective function to train a fully convolutional neural network. The structure loss helps generate perturbations whose type and magnitude are defined by a target image processing filter. The semantic adversarial loss considers groups of (semantic) labels to craft perturbations that prevent the filtered image {from} being classified with a label in the same group. We validate our framework with three different target filters, namely detail enhancement, log transformation and gamma correction filters; and evaluate the adversarially filtered images against three classifiers, ResNet50, ResNet18 and AlexNet, pre-trained on ImageNet. We show that the proposed framework generates filtered images with a high success rate, robustness, and transferability to unseen classifiers. We also discuss objective and subjective evaluations of the adversarial perturbations.

Keywords

Cite

@article{arxiv.2008.06069,
  title  = {Semantically Adversarial Learnable Filters},
  author = {Ali Shahin Shamsabadi and Changjae Oh and Andrea Cavallaro},
  journal= {arXiv preprint arXiv:2008.06069},
  year   = {2022}
}

Comments

13 pages

R2 v1 2026-06-23T17:50:42.717Z