Over the past few years, the field of adversarial attack received numerous attention from various researchers with the help of successful attack success rate against well-known deep neural networks that were acknowledged to achieve high classification ability in various tasks. However, majority of the experiments were completed under a single model, which we believe it may not be an ideal case in a real-life situation. In this paper, we introduce a novel federated adversarial training method for smart home face recognition, named FLATS, where we observed some interesting findings that may not be easily noticed in a traditional adversarial attack to federated learning experiments. By applying different variations to the hyperparameters, we have spotted that our method can make the global model to be robust given a starving federated environment. Our code can be found on https://github.com/jcroh0508/FLATS.
翻译:过去几年来,对抗性攻击领域在对公认在各种任务中达到高分级能力的著名深层神经网络的成功攻击成功率的帮助下,得到了不同研究人员的众多关注,然而,大多数实验都是在一个单一模式下完成的,我们认为,在现实环境中,这不是一个理想的情况。在本文中,我们引入了一个名为FLATS的新颖的联邦对抗性对抗性训练方法,用于智能家庭脸部识别,我们发现一些有趣的发现,在传统的对抗性攻击中,对联合学习实验来说,这些发现可能不容易注意到。我们通过对超光谱进行不同的变异,发现我们的方法可以使全球模型在饥饿的联邦环境中变得坚固。我们的代码可以在 https://github.com/jcroh0508/FLATS上找到。