公开(公告)号：US20220092336A1

公开(公告)日：2022-03-24

申请号：US17542692

申请日：2021-12-06

Applicant: Shenzhen Institutes of Advanced Technology

Inventor： Jiaao YU ,  Lei PENG ,  Huiyun LI

IPC: G06K9/62 ,  G06N3/04 ,  G06F21/36

Abstract: An adversarial image generation method, a computer device, and a computer-readable storage medium are provided. The method includes the following. A reference model classification-equivalent with a target classification model is generated according to the target classification model. A target image is obtained and an original noise for the target image is generated according to the reference model. A first noise and the original noise are input into an adversarial model and a second noise corresponding to the first noise is output when the adversarial model meets a convergence condition, where the second noise enhances an information entropy of the original noise. An enhanced noise image corresponding to the target image is generated according to the second noise and the target image, where a classification accuracy of the enhanced noise image in the target classification model is less than a classification accuracy of the target image in the target classification model.