TARU PUBLICATIONS
Journal of Information and Optimization Sciences cover
Hybrid ·Peer-reviewed·ISSN (Online): 2169-0103·ISSN (Print): 0252-2667

WoS  JIF 2026 : 0.4 (Q4)

Powered by:Powered by

Monthly Journal: Publishes theoretical and applied research on topics in information and optimization sciences.

Issues up to 2022 co-published with and available at:Taylor & Francis
submissions@tarupublications.com
Open Access Research Article

Adaptive noise injection techniques for optimizing deep learning models under adversarial attacks

* , , , , , ,

* Corresponding author · click or hover a name for details

pp. 1153–1163Vol. 46Issue 4-BMay 2025DOI: 10.47974/JIOS-1899XML
Received:
14 Oct 2024
Published Online:
31 May 2025
Article type:
Research Article
Language:
EN
Article no.:
JIOS-1899
Pages:
1153–1163

Abstract

More and more apps are using deep learning models, which has raised worries about how vulnerable they are to threats from other programs. As a result, academics have looked into adaptable noise input methods as a way to make these models more resistant to attacks like these. In this study, we look at all the latest adaptive noise input methods that are designed to make deep learning models work better in hostile environments. By adding noise to the input space, hidden layers, or gradients during model training, these methods try to lessen the effect of hostile changes. These methods make the model more resistant to hostile manipulation without affecting its performance on clean data. They do this by changing the noise parameters on the fly based on the features of the input data or the model’s performance. This paper uses experiments and comparisons to show how well and how many different ways adaptive noise input techniques can be used to make deep learning models safer and more resilient against threats.

Keywords

Subject Classifications

68M10

References

[1] C.-H. H. Yang, Z. Zhang, J. Li, P.-Y. Chen, and C.-J. Hsieh, “Enhanced Adversarial Strategically-Timed Attacks Against Deep Reinforcement Learning,” ICASSP 2020-2020 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), Barcelona, Spain, pp. 3407-3411 (2020).
[2] F. Spasiano, G. Gennaro and S. Scardapane, “Evaluating Adversarial Attacks and Defences in Infrared Deep Learning Monitoring Systems,” 2022 International Joint Conference on Neural Networks (IJCNN), Padua, Italy, pp. 1-6 (2022).
[3] C. Junliang, “CNN or RNN: Review and Experimental Comparison on Image Classification,” 2022 IEEE 8th International Conference on Computer and Communications (ICCC), Chengdu, China, pp. 1939-1944 (2022).
[4] D. Edwards and D. B. Rawat, “Study of adversarial machine learning with infrared examples for surveillance applications”, Electronics, vol. 9, no. 8 (2020).
[5] Peiyu Ma, Recognition of Handwritten Digit using Convolutional Neural Network IEEE (2020).
[6] X. Zhu, X. Li, J. Li, Z. Wang and X. Hu, Fooling thermal infrared pedestrian detectors in real world using small bulbs (2021).
[7] S. S. Patil and E. Rosemaro, “Cybersecurity Threat Detection and Prevention using Machine Learning Approaches”, IJRAET, vol. 12, no. 1, pp. 9–15, Jun. (2023).
[8] A. Sikri, A. Mathur and G. Verma, “Secrecy Performance Enhancement of Artificial Noise Injection Scheme-based FSO Systems,” 2021 IEEE 94th Vehicular Technology Conference (VTC2021-Fall), Norman, OK, USA, pp. 01-05 (2021).
[9] B. He, X. Zhou, and T. D. Abhayapala, “Artificial noise injection for securing single-antenna systems”, IEEE Trans. Veh. Technol., vol. 66, no. 10, pp. 9577-9581, Oct. (2017).
[10] Y. O. Anisimov and D. A. Katcai, “Deep Reinforcement Learning Approach for Autonomous Driving”, Journal of Physics. Conference Series, vol. 1864, no. 1, pp. 12013 (2021).
[11] A. Sikri, A. Mathur, M. Bhatnagar, G. Kaddoum, P. Saxena and J. Nebhen, “Artificial Noise Injection–Based Secrecy Improvement for FSO Systems,” in IEEE Photonics Journal, vol. 13, no. 2, pp. 1-12 (April 2021) Art no. 7900412, doi: 10.1109/JPHOT.2021.3060974.
[12] A. Selvakkumar, S. Pal and Z. Jadidi, “Addressing adversarial machine learning attacks in smart healthcare perspectives” in Sensing Technology., Springer, pp. 269-282 (2022).
[13] A. Kurakin, I. J. Goodfellow and S. Bengio, “Adversarial examples in the physical world” in Artificial intelligence safety and security., Chapman and Hall/CRC, pp. 99-112 (2018).
[14] S. Saika, S. Shewali, M. J. Borah, and D. J. Mahanta, “Arithmetic mean of interval valued intuitionistic fuzzy soft sets and its application in diagnosing infectious diseases,” J. Interdiscip. Math., vol. 27, no. 5, pp. 1079–1090 (2024), doi: 10.47974/JIM-1934.

Views: 285Downloads: 90Citations: 0