Advances, Systems and Applications
Table 4 The false positive rate (FP) and the defense success rate (DSR) against the adversarial examples crated on MobileNetV3 by SIM attack method. The attacks are based on MI-FGSM
From: A secure data interaction method based on edge computing
Method | Threshold | FP | DSR |
|---|---|---|---|
KL | 5.204 | 1.0% | 0.1% |
7.326 | 5.0% | 1.4% | |
8.124 | 10.0% | 2.3% | |
9.180 | 20.0% | 3.7% | |
FS | 14.614 | 1.0% | 1.7% |
11.266 | 5.0% | 5.7% | |
10.254 | 10.0% | 8.7% | |
8.333 | 20.0% | 19.9% | |
EADM (ours) | \(\diagdown\) | 0.2% | 91.4% |