The Research for the Robustness of SAR Ship Identification CNN Based on Adversarial Example
Xu Yanjie, Sun Hao, Lei Lin, Ji Kefeng, Kuang Gangyao
State Key Laboratory of Complex Electromagnetic Environment Effects on Electronics and Information System, College of Electronic Science and Technology, National University of Defense Technology
Abstract：With the rapid development of deep learning technology, CNN has got great accuracy in SAR ship classification. However, because of the character of SAR picture and the fragility of CNN, the performance of CNN is unstable that causes hidden danger in practical?application. For CNN's insufficient robustness in SAR ship identification task, this paper makes use of adversarial example to research the adversarial robustness of SAR ship identification that represent the ability of maintaining stable input-output relation under small change. This paper use kinds of adversarial attack based on gradient, boundary, block box and so on to fool most common CNN in SAR ship identification task. Then, we use the identification result and network visualization technology to evaluate the CNN’s robustness, finding that most SAR ship identification CNN’s adversarial robustness is weak that would be easily fooled by little change. Finally, we enhance the robustness of CNN targeted based on the evaluation that behaves much better in adversarial robustness. The use of adversarial example and the above research process breaks new ground in the research for the Robustness of SAR Ship identification.
徐延杰, 孙浩, 雷琳, 计科峰, 匡纲要. 基于对抗攻击的SAR舰船识别卷积神经网络鲁棒性研究[J]. 信号处理, 2020, 36(12): 1965-1978.
Xu Yanjie, Sun Hao, Lei Lin, Ji Kefeng, Kuang Gangyao. The Research for the Robustness of SAR Ship Identification CNN Based on Adversarial Example. Journal of Signal Processing, 2020, 36(12): 1965-1978.
2020, Vol. 36 
