Otpornost modela dubokog učenja na suparničke napade

master's thesis

• Title (english): Resistance of deep learning models to adversarial attacks
• Author: Mario Gjenero
• Mentor: Sonja Grgić (mentor)
• Committee member: Sonja Grgić (član povjerenstva)
• Committee member: Marko Bosiljevac (član povjerenstva)
• Committee member: Dario Bojanjac (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023-07-11, Croatia

Abstract

Ovaj rad istražuje suparničke napade na duboke neuronske mreže korištene za probleme računalnog vida. Suparnički napadi mijenjaju ulazne podatke kako bi model strojnog učenja donio pogrešne zaključke. Karakteristika ovih napada je da su promjene na ulaznim podacima gotovo neprimjetne ljudima dok značajno utječu na model. Uvodni dio rada detaljno objašnjava duboke neuronske mreže, njihov rad te osjetljivost na suparničke napade. Kasnije u radu, detaljno su objašnjeni različiti načini kreiranja suparničkih napada, uključujući algoritme korištene za njihovo generiranje. Opisane su i metode obrana kojima štitimo duboke neuronske mreže, kako bi postale robusnije. Provedeni su eksperimenti kojima je utvrđena učinkovitost suparničkih napada i obrana od njih, a rad je zaključen objašnjenjem dobivenih rezultata.

Abstract (english)

This thesis investigates adversarial attacks on deep neural networks used for computer vision problems. Adversarial attacks modify input data in order to cause the machine learning model to make incorrect conclusions. The characteristic of these attacks is that the changes made to the input data are nearly imperceptible to humans, while significantly impacting machine learning model. The introduction of the thesis provides a detailed explanation of deep neural networks, their functioning and their vulnerability to adversarial attacks. Later in the thesis, various methods of creating adversarial attacks are explained in detail, including the specific algorithms used for generating them. Defense methods are described in order to protect deep neural networks and make them more robust. Various experiments have been conducted to evaluate the effectiveness of adversarial attacks and defenses against them, and the thesis is concluded by interpreting the obtained results

• Keywords: suparnički napad; duboke neuronske mreže; robusnost; računalni vid; duboko učenje; strojno učenje
• Keywords (english): adversarial attack; deep neural networks; robustness; computer vision; deep learning; machine learning
• Language: croatian
• URN:NBN: urn:nbn:hr:168:664117
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-10-11 08:53:40