RetrievalGuard: Provably Robust 1-Nearest Neighbor Image Retrieval. (arXiv:2206.11225v1 [cs.IR])

Web: http://arxiv.org/abs/2206.11225

Recent research works have shown that image retrieval models are vulnerable
to adversarial attacks, where slightly modified test inputs could lead to
problematic retrieval results. In this paper, we aim to design a provably
robust image retrieval model which keeps the most important evaluation metric
Recall@1 invariant to adversarial perturbation. We propose the first 1-nearest
neighbor (NN) image retrieval algorithm, RetrievalGuard, which is provably
robust against adversarial perturbations within an $\ell_2$ ball of calculable
radius. The challenge is to design …

arxiv image retrieval