Adversarial Data Hiding in Digital Images |
| |
Authors: | Dan Wang Ming Li Yushu Zhang |
| |
Affiliation: | 1.College of Software, Henan Normal University, Xinxiang 453007, China;2.College of Computer and Information Engineering, Henan Normal University, Xinxiang 453007, China;3.Key Laboratory of Artificial Intelligence and Personalized Learning in Education of Henan Province, Xinxiang 453007, China;4.College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing 211106, China; |
| |
Abstract: | In recent studies of generative adversarial networks (GAN), researchers have attempted to combine adversarial perturbation with data hiding in order to protect the privacy and authenticity of the host image simultaneously. However, most of the studied approaches can only achieve adversarial perturbation through a visible watermark; the quality of the host image is low, and the concealment of data hiding cannot be achieved. In this work, we propose a true data hiding method with adversarial effect for generating high-quality covers. Based on GAN, the data hiding area is selected precisely by limiting the modification strength in order to preserve the fidelity of the image. We devise a genetic algorithm that can explore decision boundaries in an artificially constrained search space to improve the attack effect as well as construct aggressive covert adversarial samples by detecting “sensitive pixels” in ordinary samples to place discontinuous perturbations. The results reveal that the stego-image has good visual quality and attack effect. To the best of our knowledge, this is the first attempt to use covert data hiding to generate adversarial samples based on GAN. |
| |
Keywords: | adversarial example convolutional neural network data hiding LSB |
|
|