NIPS 2017: Adversarial Learning Development Set (ImageNet-NIPS)

Most existing machine learning classifiers are highly vulnerable to adversarial examples. An adversarial example is a sample of input data which has been modified very slightly in a way that is intended to cause a machine learning classifier to misclassify it. In many cases, these modifications can be so subtle that a human observer does not even notice the modification at all, yet the classifier still makes a mistake.Adversarial examples pose security concerns because they could be used to perform an attack on machine learning systems, even if the adversary has no access to the underlying model.To accelerate research on adversarial examples, Google Brain is organizing Competition on Adversarial Examples and Defenses within the NIPS 2017 competition track. This dataset contains the development images for this competition.The competition on Adversarial Examples and Defenses consist of three sub-competitions:Non-targeted Adversarial Attack. The goal of the non-targeted attack is to slightly modify source image in a way that image will be classified incorrectly by generally unknown machine learning classifier.Targeted Adversarial Attack. The goal of the targeted attack is to slightly modify source image in a way that image will be classified as specified target class by generally unknown machine learning classifier.Defense Against Adversarial Attack. The goal of the defense is to build machine learning classifier which is robust to adversarial example, i.e. can classify adversarial images correctly.In each of the sub-competitions you're invited to make and submit a program which solves the corresponding task. In the end of the competition we will run all attacks against all defenses to evaluate how each of the attacks performs against each of the defenses.

搜集汇总

背景与挑战

背景概述

该数据集是NIPS 2017竞赛中用于对抗学习研究的开发集，专注于对抗样本的生成与防御。它包含三个子任务：非定向对抗攻击、定向对抗攻击和对抗攻击防御，旨在评估机器学习模型在对抗性环境下的脆弱性和鲁棒性。数据集由Google Brain组织，适用于计算机视觉领域的研究，但需通过IEEE DataPort订阅访问。