Intermediate-Layer Transferable Adversarial Attack With DNN Attention

Abstract

The widespread deployment of deep learning models in practice necessitates an assessment of their vulnerability, particularly in security-sensitive areas. As a result, transfer-based adversarial attacks have elicited increasing interest in assessing the security of deep learning models. However, adversarial samples usually exhibit poor transferability over different models because of overfitting of the particular architecture and feature representation of a source model. To address this problem, the Intermediate Layer Attack with Attention guidance (IAA) is proposed to alleviate overfitting and enhance the black-box transferability. The IAA works on an intermediate layer 𝑙 of the source model. Guided by the model's attention to the features of layer 𝑙, the attack algorithm seeks and undermines the key features that are likely to be adopted by diverse architectures. Significantly, IAA focuses on improving existing white-box attacks without introducing significant visual perceptual quality degradation. Namely, IAA maintains the white-box attack performance of the original algorithm while significantly enhancing its black-box transferability. Extensive experiments on ImageNet classifiers confirmed the effectiveness of our method. The proposed IAA outperformed all state-of-the-art benchmarks in various white-box and black-box settings. INDEX TERMSDeep learning, adversarial samples, black-box attack, transferability, intermediate layer, attention-guided.

Study on the tool-chip friction coefficient of bottom edge in high-speed internal cooling spiral milling hole

“…In general, the material, stress, velocity, temperature, and other factors affect the friction coefficient between a tool and a chip [4], but researchers in the field of tribology have been attempting to describe in detail how the friction interface process and the deformation mechanism of materials work. It is finally confirmed that in solid-solid contact, the friction interface will cause significant material changes, resulting in a third body [7,8], which is also called a friction film, a friction layer [9], a transfer layer [10], a mechanical mixing layer [11], etc. The coolant cannot successfully build a water film under centrifugal and hightemperature conditions to form a solid-solid contact for high-speed internal cooling milling [12].…”