Skip to content
InfoResearchPreprint

Detection of Adversarial Attacks on Super-Resolvers Using Spectral Features

Published
Record updated
View JSON

Summary

Researchers propose a spectral detection method for finding adversarial attacks embedded in super-resolution model weights, a preprocessing component of imaging pipelines. The method trains an XGBoost detector on the radially-averaged power spectral density and benchmarks it against magnitude- and phase-based Fourier spectrum detectors across training and cross-architecture scenarios. The proposed detector outperforms the comparison detectors in most scenarios, and high-frequency features prove most informative for detecting AdvSR attacks.