标题： 基于可逆图像变换的可逆对抗攻击 显示英文标题

标题： Reversible Adversarial Attack based on Reversible Image Transformation

摘要： 为了防止图像数据（如人脸）的非法或未经授权的访问，并确保合法用户可以使用授权保护的数据，可逆对抗攻击技术正在兴起。 可逆对抗样本（RAE）同时具备攻击能力和可逆性。 然而，由于当对抗扰动较强时会出现严重的失真和图像恢复失败，现有的技术无法满足应用需求。 在本文中，我们利用可逆图像变换技术生成RAE并实现可逆对抗攻击。 实验结果表明，所提出的RAE生成方案可以确保不可察觉的图像失真，并且原始图像可以无误差地重建。 此外，攻击能力和图像质量不受扰动幅度的限制。 显示英文摘要

摘要： In order to prevent illegal or unauthorized access of image data such as human faces and ensure legitimate users can use authorization-protected data, reversible adversarial attack technique is rise. Reversible adversarial examples (RAE) get both attack capability and reversibility at the same time. However, the existing technique can not meet application requirements because of serious distortion and failure of image recovery when adversarial perturbations get strong. In this paper, we take advantage of Reversible Image Transformation technique to generate RAE and achieve reversible adversarial attack. Experimental results show that proposed RAE generation scheme can ensure imperceptible image distortion and the original image can be reconstructed error-free. What's more, both the attack ability and the image quality are not limited by the perturbation amplitude.