Query Attack Via Opposite-direction Feature:towards Robust Image Retrieval

Abstract

Most existing works of adversarial samples focus on attacking image recognition models, while little attention is paid to the image retrieval task. In this paper, we identify two inherent challenges in applying prevailing image recognition attack methods to image retrieval. First, image retrieval demands discriminative visual features, which is significantly different from the one-hot class prediction in image recognition. Second, due to the disjoint and potentially unrelated classes between the training and test set in image retrieval, predicting the query category from predefined training classes is not accurate and leads to a sub-optimal adversarial gradient. To address these limitations, we propose a new white-box attack approach, Opposite-Direction Feature Attack (ODFA), to generate adversarial queries. Opposite-Direction Feature Attack (ODFA) effectively exploits feature-level adversarial gradients and takes advantage of feature distance in the representation space. To our knowle

Stats

• citations0
• S2 citations—
• github stars0
• HF likes0
• heat score0.00
• arxiv keyzheng2018query

Related papers

• Targeted Mismatch Adversarial Attack: Query With A Flower To Retrieve The Tower (2019)13.23
• QAIR: Practical Query-efficient Black-box Attacks For Image Retrieval (2021)12.54
• Unsupervised Multi-criteria Adversarial Detection In Deep Image Retrieval (2023)0.00
• A Review Of Image Retrieval Techniques: Data Augmentation And Adversarial Learning Approaches (2024)0.00
• Unsupervised Adversarial Attacks On Deep Feature-based Retrieval With GAN (2019)0.00
• Boundary-aware Backward-compatible Representation Via Adversarial Learning In Image Retrieval (2023)9.21
• Adversarial Attack On Deep Product Quantization Network For Image Retrieval (2020)11.29
• Who's Afraid Of Adversarial Queries? The Impact Of Image Modifications On Content-based Image Retrieval (2019)0.00