{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/defense-against-adversarial-attacks-on-no","title":"Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization","arxiv_id":"2403.11397","date":"2024-03-18","proceeding":"CVPR 2024 1","authors":["Yujia Liu","Chenxi Yang","Dingquan Li","Jianhao Ding","Tingting Jiang"],"abstract":"The task of No-Reference Image Quality Assessment (NR-IQA) is to estimate the quality score of an input image without additional information. NR-IQA models play a crucial role in the media industry, aiding in performance evaluation and optimization guidance. However, these models are found to be vulnerable to adversarial attacks, which introduce imperceptible perturbations to input images, resulting in significant changes in predicted scores. In this paper, we propose a defense method to improve the stability in predicted scores when attacked by small perturbations, thus enhancing the adversarial robustness of NR-IQA models. To be specific, we present theoretical evidence showing that the magnitude of score changes is related to the $\\ell_1$ norm of the model's gradient with respect to the input image. Building upon this theoretical foundation, we propose a norm regularization training strategy aimed at reducing the $\\ell_1$ norm of the gradient, thereby boosting the robustness of NR-IQA models. Experiments conducted on four NR-IQA baseline models demonstrate the effectiveness of our strategy in reducing score changes in the presence of adversarial attacks. To the best of our knowledge, this work marks the first attempt to defend against adversarial attacks on NR-IQA models. Our study offers valuable insights into the adversarial robustness of NR-IQA models and provides a foundation for future research in this area.","url_abs":"https://arxiv.org/abs/2403.11397v1","url_pdf":"https://arxiv.org/pdf/2403.11397v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"defense-against-adversarial-attacks-on-no","repo_url":"https://github.com/yangid/defenseiqa-nt","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"adversarial-robustness","task_name":"Adversarial Robustness"},{"task_slug":"image-quality-assessment","task_name":"Image Quality Assessment"},{"task_slug":"no-reference-image-quality-assessment","task_name":"No-Reference Image Quality Assessment"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2403.11397","atlas_url":"https://app.syntology.ai/?focus=2403.11397","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2403.11397"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/YangiD/DefenseIQA-NT","reach":null}],"summary":{"ran":1,"unverified":3},"by_repo_kind":{"official":{"samples":4,"ran":1,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"2e47b434b1d40b5c","entry":"ResNetBackbone","repo":"YangiD/DefenseIQA-NT","repo_kind":"official","path":"models.py","file_url":"https://github.com/YangiD/DefenseIQA-NT/blob/HEAD/models.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2e47b434b1d40b5c"}},{"code_sha256_prefix":"79bfd01c6fbcf6e5","entry":"HyperNet","repo":"YangiD/DefenseIQA-NT","repo_kind":"official","path":"models.py","file_url":"https://github.com/YangiD/DefenseIQA-NT/blob/HEAD/models.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"79bfd01c6fbcf6e5"}},{"code_sha256_prefix":"c224e34b49e8a01e","entry":"resnet50_backbone","repo":"YangiD/DefenseIQA-NT","repo_kind":"official","path":"models.py","file_url":"https://github.com/YangiD/DefenseIQA-NT/blob/HEAD/models.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c224e34b49e8a01e"}},{"code_sha256_prefix":"70c2e8a4a76907d9","entry":"weights_init_xavier","repo":"YangiD/DefenseIQA-NT","repo_kind":"official","path":"models.py","file_url":"https://github.com/YangiD/DefenseIQA-NT/blob/HEAD/models.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"70c2e8a4a76907d9"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}