Adversarial Example Generation Method Based on Probability Histogram Equalization

CNNs (Convolutional Neural Networks) have a good performance on most classification tasks, but they are vulnerable when meeting adversarial examples. Research and design of highly aggressive adversarial examples can help enhance the security and robustness of CNNs. The transferability of adversarial examples is still low in black-box settings. Therefore, an adversarial example method based on probability histogram equalization, namely HE-MI-FGSM (Histogram Equalization Momentum Iterative Fast Gradient Sign Method) is proposed. In each iteration of the adversarial example generation process, the original input image is randomly histogram equalized, and then the gradient is calculated to generate adversarial perturbations to mitigate overfitting in the adversarial example. The effectiveness of the method is verified on the ImageNet dataset. Compared with the advanced method I-FGSM (Iterative Fast Gradient Sign Method) and MI-FGSM (Momentum I-FGSM), the attack success rate in the adversarial training network increased by 27.9% and 7.7% on average, respectively.