中圖分類號： TP181
文獻標識碼： A
DOI： 10.19358/j.issn.2096-5133.2021.06.002
引用格式： 葉啟松,，戴旭初. 一種利用類別顯著性映射生成對抗樣本的方法[J].信息技術(shù)與網(wǎng)絡安全，2021,，40(6)：9-14.

An adversarial example generation method based on class activation map

Abstract： The adversarial examples, if their transferability is stronger, will be more effective to attack models with unknown structure. Therefore, a key to design adversarial examples generation method is to improve the transferability of adversarial examples. However, the existing method for generating adversarial examples are highly coupled with the structure and parameters of the local model, which make the generated adversarial examples difficult to attack other models. The class activation map can extract the key feature information of the example, and it has high similarity in different neural network models. Based on this observation, the class activation map is used to constrain the process of example generation. Experimental results show that the adversarial examples generated by this method have good transferability.

Key words : deep learning；security,；adversarial example,；transferability