Back to articles
Volume: 33 | Article ID: art00011
Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions
  DOI :  10.2352/ISSN.2470-1173.2021.4.MWSF-300  Published OnlineJanuary 2021

Machine Learning (ML) algorithms are susceptible to adversarial attacks and deception both during training and deployment. Automatic reverse engineering of the toolchains behind these adversarial machine learning attacks will aid in recovering the tools and processes used in these attacks. In this paper, we present two techniques that support automated identification and attribution of adversarial ML attack toolchains using Co-occurrence Pixel statistics and Laplacian Residuals. Our experiments show that the proposed techniques can identify parameters used to generate adversarial samples. To the best of our knowledge, this is the first approach to attribute gradient based adversarial attacks and estimate their parameters. Source code and data is available at: <ext-link ext-link-type="url" xlink:href=""></ext-link>.

Subject Areas :
Views 17
Downloads 0
 articleview.views 17
 articleview.downloads 0
  Cite this article 

Michael Goebel, Jason Bunk, Srinjoy Chattopadhyay, Lakshmanan Nataraj, Shivkumar Chandrasekaran, B. S. Manjunath, "Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptionsin Proc. IS&T Int’l. Symp. on Electronic Imaging: Media Watermarking, Security, and Forensics,  2021,  pp 300-1 - 300-7,

 Copy citation
  Copyright statement 
Copyright © Society for Imaging Science and Technology 2021
Electronic Imaging
Society for Imaging Science and Technology
7003 Kilworth Lane, Springfield, VA 22151 USA