An Adversarial Examples Defense Method Based on Image Low-Frequency Information

Abstract

Convolutional neural networks have been applied in image recognition widely, and acquired well-known results. However, the discovery of adversarial examples in recent years has attracted many researcher’s attention on the safety and reliability of convolutional neural networks. Adversarial examples are small perturbations added only to the clean image data, which could cause the trained model makes wrong identifications, while people could still recognize. In this paper, we propose a new convolutional neural network to defense the adversarial examples. It breaks into two branches after inputting an image. One branch likes a normal image recognition model, while another branch distills the low-frequency information of the image firstly, and then uses the low-frequency image to train. The two branches combine to make the output of the model. The presented model uses the image’s low-frequency information, through which people often recognizes an object. The experiments show that the presented model suppresses the success rate of the attack in the face of the adversarial examples, and improves the model’s recognition success rate, comparing to some other methods.