论文标题
一种基于遗传编程的深度基于艺术媒体分类的方法,可靠地对对抗性扰动
A Deep Genetic Programming based Methodology for Art Media Classification Robust to Adversarial Perturbations
论文作者
论文摘要
艺术媒体分类问题是当前的研究领域,由于对高价值艺术作品的特征的复杂提取和分析,引起了人们的关注。人们对属性的看法不能是主观的,因为人类有时会遵循对艺术品的有偏见的解释,同时确保自动观察的可信度。机器学习通过从图像中提取人造特征的学习过程而不是设计手工制作的功能探测器,从而超过了许多领域。但是,与其可靠性相关的主要问题引起了人们的注意,因为在输入图像中有意(对抗攻击)有意地扰动,可以完全改变其预测。通过这种方式,我们预见到了两种处理情况的方式:(1)解决当前神经网络方法中的对抗性攻击问题,或(2)提出了一种不同的方法,可以挑战深度学习而不会影响对抗性攻击的影响。第一个尚未解决,对抗性攻击变得更加复杂。因此,这项工作提出了一种称为大脑编程的深层遗传编程方法,该方法与深度学习竞争,并使用艺术专家制作的两个艺术品数据库来研究对抗性攻击的可转移性。结果表明,与Alexnet相比,大脑编程方法可以保留其性能,从而使其对这些扰动稳定,并与深度学习的表现竞争。
Art Media Classification problem is a current research area that has attracted attention due to the complex extraction and analysis of features of high-value art pieces. The perception of the attributes can not be subjective, as humans sometimes follow a biased interpretation of artworks while ensuring automated observation's trustworthiness. Machine Learning has outperformed many areas through its learning process of artificial feature extraction from images instead of designing handcrafted feature detectors. However, a major concern related to its reliability has brought attention because, with small perturbations made intentionally in the input image (adversarial attack), its prediction can be completely changed. In this manner, we foresee two ways of approaching the situation: (1) solve the problem of adversarial attacks in current neural networks methodologies, or (2) propose a different approach that can challenge deep learning without the effects of adversarial attacks. The first one has not been solved yet, and adversarial attacks have become even more complex to defend. Therefore, this work presents a Deep Genetic Programming method, called Brain Programming, that competes with deep learning and studies the transferability of adversarial attacks using two artworks databases made by art experts. The results show that the Brain Programming method preserves its performance in comparison with AlexNet, making it robust to these perturbations and competing to the performance of Deep Learning.