1. Adversarial mimicry attacks against image splicing forensics: An approach for jointly hiding manipulations and creating false detections.
- Author
-
Boato, Giulia, De Natale, Francesco G.B., De Stefano, Gianluca, Pasquini, Cecilia, and Roli, Fabio
- Subjects
- *
COMPUTER security , *DENIAL of service attacks , *MACHINE learning , *DETECTORS , *IMAGE encryption - Abstract
The term "mimicry attack" has been coined in computer security and used in adversarial machine learning: an attacker observes what a machine-learning system has learned and adjusts the malicious input so that it mimics a benign input. In this paper we extend this concept to image forensics, to allow an attacker modifying a manipulated image so that it appears pristine when analyzed by a target forensic detector. Recent work has shown that such attacks can be executed against detectors based on deep networks for hiding image tampering. We do more than that: our mimicry attack can force the target detector to identify arbitrary fictitious manipulations, while hiding the true ones. Accordingly, the user of the forensic detector is completely misled. From a methodological viewpoint, the proposed attack artificially alters the detector-specific intermediate representations according to the pixel distribution in the manipulated image, by applying a gradient-based optimization process. Experimental tests on different data sets and detectors demonstrate that our approach succeeds in jointly hiding manipulated areas and arbitrarily adding new ones, favorably comparing with the state-of-the-art in the first task. [Display omitted] • The proposed mimicry attack hides forgeries in images and introduces fictitious ones • It allows adversaries to introduce semantic biases and mislead the forensic detection • Its large-scale adoption may hinder the trust on forensic tools, akin to DoS attacks • Sequential detector-specific attacks enable tackling multiple detectors at once [ABSTRACT FROM AUTHOR]
- Published
- 2024
- Full Text
- View/download PDF