Adversarial Attack On Deep Product Quantization Network For Image Retrieval

Abstract

Deep product quantization network (DPQN) has recently received much attention in fast image retrieval tasks due to its efficiency of encoding high-dimensional visual features especially when dealing with large-scale datasets. Recent studies show that deep neural networks (DNNs) are vulnerable to input with small and maliciously designed perturbations (a.k.a., adversarial examples). This phenomenon raises the concern of security issues for DPQN in the testing/deploying stage as well. However, little effort has been devoted to investigating how adversarial examples affect DPQN. To this end, we propose product quantization adversarial generation (PQ-AG), a simple yet effective method to generate adversarial examples for product quantization based retrieval systems. PQ-AG aims to generate imperceptible adversarial perturbations for query images to form adversarial queries, whose nearest neighbors from a targeted product quantizaiton model are not semantically related to those from the orig

Stats

• citations31
• S2 citations—
• github stars0
• HF likes0
• heat score11.29
• arxiv keyfeng2020adversarial

Related papers

• Beyond Product Quantization: Deep Progressive Quantization For Image Retrieval (2019)12.95
• End-to-end Supervised Product Quantization For Image Search And Retrieval (2017)13.05
• Generalized Product Quantization Network For Semi-supervised Image Retrieval (2020)12.17
• Matching-oriented Product Quantization For Ad-hoc Retrieval (2021)2.29
• Self-supervised Product Quantization For Deep Unsupervised Image Retrieval (2021)13.44
• Orthonormal Product Quantization Network For Scalable Face Image Retrieval (2021)8.60
• PQA: Exploring The Potential Of Product Quantization In DNN Hardware Acceleration (2023)3.58
• Targeted Mismatch Adversarial Attack: Query With A Flower To Retrieve The Tower (2019)13.23