English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

High spatial resolution remote sensing (HSRRS) images classification and identification is an important technology to acquire land surface information for land resource management, geographical situation monitoring, and global climate change. As the hottest deep learning method, convolutional neural network (CNN) has been successfully applied in HSRRS image classification and identification due to its powerful information extraction capability. However, adversarial perturbations caused by radiation transfer process or artificial or other unpredictable disturbances often deteriorate the stability of CNN. Under this background, we propose a robust architecture for adversarial attack and detection to classify and identify HSRRS images. First of all, two white-box attacks [i.e., large Broyden–Fletcher–Goldfarb–Shanno (L-BFGS) and fast gradient sign method (FGSM)] are adopted respectively to generate adversarial images to confuse the model, and to assess the robustness of the HSRRS image classifier. Second, adversarial detection models based on support vector machine (SVM) with single or fused two level features are proposed to improve the detection accuracy. The features extracted from the testing CNN full connected layers contain adversarial perturbations and real information, from which SVM classifier and discriminate the real and the adversarial images. The adversarial attack model is evaluated in terms of overall accuracy (<inline-formula> <tex-math notation="LaTeX">$OA$ </tex-math></inline-formula>) and kappa coefficient (<inline-formula> <tex-math notation="LaTeX">$kc$ </tex-math></inline-formula>). The simulation results show that the <inline-formula> <tex-math notation="LaTeX">$OA$ </tex-math></inline-formula> decreases from 96.4% to 44.4% and 33.3% for L-BFGS and FGSM attacked classifier model, respectively. The adversarial detection is evaluated via <inline-formula> <tex-math notation="LaTeX">$OA$ </tex-math></inline-formula>, detection probability <inline-formula> <tex-math notation="LaTeX">$P_{D}$ </tex-math></inline-formula>, false alarm probability <inline-formula> <tex-math notation="LaTeX">$P_{FA}$ </tex-math></inline-formula>, and miss probability <inline-formula> <tex-math notation="LaTeX">$P_{M}$ </tex-math></inline-formula>. The simulation results indicate that the fused model with two different level features based on SVM can obtain the best <inline-formula> <tex-math notation="LaTeX">$OA$ </tex-math></inline-formula> (94.5%), <inline-formula> <tex-math notation="LaTeX">$P_{D}$ </tex-math></inline-formula> (0.933), <inline-formula> <tex-math notation="LaTeX">$P_{FA}$ </tex-math></inline-formula> (0.040), and <inline-formula> <tex-math notation="LaTeX">$P_{M}$ </tex-math></inline-formula> (0.067) among the detectors if the classifier is attacked by the FGSM. Meanwhile, when facing the L-BFGS attack, the fused model presents similar performance if the best single level features are utilized.

Spear and Shield: Attack and Detection for CNN-Based High Spatial Resolution Remote Sensing Images Identification