Adversarial Deception Against SAR Target Recognition Network

IEEE Journal of Selected Topics in Applied Earth Observations and Remote Sensing

Deliang Xiang¹  Tianying Meng²  Yongsheng Zhou²  Fan Zhang²  Fei Ma²  Xiaokun Sun² 

[1] Beijing Advanced Innovation Center for Soft Matter Science and Engineering, Beijing, China;College of Information Science and Technology, Beijing University of Chemical Technology, Beijing, China;

关键词: Adversarial attack;    automatic target recognition (ATR);    deep learning;    synthetic aperture radar (SAR);   

DOI  :  10.1109/JSTARS.2022.3179171

来源: DOAJ

【 摘 要 】

Synthetic aperture radar (SAR) automatic target recognition (ATR) technology is one of the key technologies to achieve intelligent interpretation for SAR images. With the rapid development of deep learning, deep neural networks have been successively used in SAR ATR and show priority in comparison with the conventional methods. Recently, more and more attention is paid to the robustness of deep learning-based SAR ATR methods. The reason is that maliciously modified and imperceptible adversarial images can deceive the SAR ATR methods, which are based on the deep neural networks. In this article, we propose a novel SAR ATR adversarial deception algorithm, which fully considers the characteristics of SAR data. Our method can obtain the satisfactory perturbations with a higher deception success rate, higher recognition confidence, and smaller perturbation coverage than other state-of-the-art methods for the SAR images. Experimental results using the MSTAR dataset and OpenSARShip dataset demonstrate the effectiveness of our method. The proposed adversarial deception method can be used in the applications, such as SAR dataset protection, SAR sensor design, and SAR image quality evaluation.

【 授权许可】

Unknown