Chinese Journal of Network and Information Security ›› 2020, Vol. 6 ›› Issue (2): 1-11.doi: 10.11959/j.issn.2096-109x.2020016

• Comprehensive Reviews •     Next Articles

Research on structure and defense of adversarial example in deep learning

Guanghan DUAN1,Chunguang MA2(),Lei SONG1,Peng WU2   

  1. 1 College of Computer Science and Technology,Harbin Engineering University,Harbin 150001,China
    2 College of Computer Science and Engineering,Shandong University of Science and Technology,Qingdao 266590,China
  • Revised:2019-08-20 Online:2020-04-15 Published:2020-04-23
  • Supported by:
    The National Natural Science Foundation of China(61472097);The National Natural Science Foundation of China(61932005);The National Natural Science Foundation of China(U1936112);The Natural Science Foundation of Heilongjiang Province(JJ2019LH1770)


With the further promotion of deep learning technology in the fields of computer vision,network security and natural language processing,which has gradually exposed certain security risks.Existing deep learning algorithms can not effectively describe the essential characteristics of data or its inherent causal relationship.When the algorithm faces malicious input,it often fails to give correct judgment results.Based on the current security threats of deep learning,the adversarial example problem and its characteristics in deep learning applications were introduced,hypotheses on the existence of adversarial examples were summarized,classic adversarial example construction methods were reviewed and recent research status in different scenarios were summarized,several defense techniques in different processes were compared,and finally the development trend of adversarial example research were forecasted.

Key words: adversarial example, deep learning, security threat, defense technology

CLC Number: 

No Suggested Reading articles found!