论文标题
AdvMask:基于对抗性攻击的稀疏图像分类数据
AdvMask: A Sparse Adversarial Attack Based Data Augmentation Method for Image Classification
论文作者
论文摘要
数据增强是一种广泛使用的技术,用于增强图像分类任务中卷积神经网络(CNN)的概括能力。闭塞是影响图像分类模型的概括能力的关键因素。为了生成新样本,基于信息删除的现有数据增强方法通过随机删除图像中的某些区域来模拟遮挡样本。但是,这些方法无法根据图像的结构特征删除图像的区域。为了解决这些问题,我们提出了一种新颖的数据增强方法,即AdvMask,用于图像分类任务。 AdvMask没有随机删除图像中的区域,而是通过端到端稀疏的对抗攻击模块获得了对分类结果影响最大的关键点。因此,我们可以找到分类结果中最敏感的点,而无需考虑各种图像外观和感兴趣对象的形状的多样性。此外,还采用了一个数据增强模块来基于关键点生成结构化面具,从而迫使CNN分类模型在隐藏最歧视性内容时寻求其他相关内容。 AdvMask可以有效地改善测试过程中分类模型的性能。在各种数据集和CNN模型上的实验结果验证了所提出的方法在图像分类任务中的其他先前数据增强方法的表现是否优于其他数据。
Data augmentation is a widely used technique for enhancing the generalization ability of convolutional neural networks (CNNs) in image classification tasks. Occlusion is a critical factor that affects on the generalization ability of image classification models. In order to generate new samples, existing data augmentation methods based on information deletion simulate occluded samples by randomly removing some areas in the images. However, those methods cannot delete areas of the images according to their structural features of the images. To solve those problems, we propose a novel data augmentation method, AdvMask, for image classification tasks. Instead of randomly removing areas in the images, AdvMask obtains the key points that have the greatest influence on the classification results via an end-to-end sparse adversarial attack module. Therefore, we can find the most sensitive points of the classification results without considering the diversity of various image appearance and shapes of the object of interest. In addition, a data augmentation module is employed to generate structured masks based on the key points, thus forcing the CNN classification models to seek other relevant content when the most discriminative content is hidden. AdvMask can effectively improve the performance of classification models in the testing process. The experimental results on various datasets and CNN models verify that the proposed method outperforms other previous data augmentation methods in image classification tasks.