Track manipulation, locomotion and embodied systems.
Search papers, labs, and topics across Lattice.
The authors investigate the vulnerability of image preprocessing pipelines to weight-embedded adversarial attacks in super-resolution (AdvSR) models, which can silently degrade downstream vision tasks. To counter this supply-chain threat, they train an XGBoost classifier on radially-averaged power spectral density (RAPSD) features extracted from super-resolved outputs. The method consistently outperforms baseline Fourier magnitude- and phase-based detectors in cross-architecture evaluations, establishing that high-frequency spectral distortions serve as robust, generalizable indicators of adversarial tampering.
Adversarial weight tampering in super-resolution models leaves distinct high-frequency spectral fingerprints that generalize across architectures, enabling lightweight tree-based classifiers to flag stealthy upstream attacks.
The integration of deep learning models into image preprocessing pipelines such as super-resolution introduces a largely unexplored attack vector for adversaries targeting downstream tasks. To ensure trustworthiness of critical imaging pipelines, we must be able to detect adversarial behavior within preprocessing models. In this paper, we propose a spectral-based detection method for identifying adversarial attacks embedded in super-resolution model weights. More specifically, we use the radially-averaged power spectral density as a discriminative feature to train an extreme gradient boosting (XGBoost) detector, demonstrating detectability of model-level threats in super-resolution networks. We further benchmark our detector against magnitude- and phase-based Fourier spectrum detectors, evaluating each method across a range of training and cross-architecture scenarios. Our proposed detector out-performs the comparison detectors in most of these scenarios and indicates that high-frequency features are most informative for detecting AdvSR attacks across SR architectures.