29 research outputs found
A Model-Predictive Motion Planner for the IARA Autonomous Car
We present the Model-Predictive Motion Planner (MPMP) of the Intelligent
Autonomous Robotic Automobile (IARA). IARA is a fully autonomous car that uses
a path planner to compute a path from its current position to the desired
destination. Using this path, the current position, a goal in the path and a
map, IARA's MPMP is able to compute smooth trajectories from its current
position to the goal in less than 50 ms. MPMP computes the poses of these
trajectories so that they follow the path closely and, at the same time, are at
a safe distance of eventual obstacles. Our experiments have shown that MPMP is
able to compute trajectories that precisely follow a path produced by a Human
driver (distance of 0.15 m in average) while smoothly driving IARA at speeds of
up to 32.4 km/h (9 m/s).Comment: This is a preprint. Accepted by 2017 IEEE International Conference on
Robotics and Automation (ICRA
Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data
In the past few years, Convolutional Neural Networks (CNNs) have been
achieving state-of-the-art performance on a variety of problems. Many companies
employ resources and money to generate these models and provide them as an API,
therefore it is in their best interest to protect them, i.e., to avoid that
someone else copies them. Recent studies revealed that state-of-the-art CNNs
are vulnerable to adversarial examples attacks, and this weakness indicates
that CNNs do not need to operate in the problem domain (PD). Therefore, we
hypothesize that they also do not need to be trained with examples of the PD in
order to operate in it.
Given these facts, in this paper, we investigate if a target black-box CNN
can be copied by persuading it to confess its knowledge through random
non-labeled data. The copy is two-fold: i) the target network is queried with
random data and its predictions are used to create a fake dataset with the
knowledge of the network; and ii) a copycat network is trained with the fake
dataset and should be able to achieve similar performance as the target
network.
This hypothesis was evaluated locally in three problems (facial expression,
object, and crosswalk classification) and against a cloud-based API. In the
copy attacks, images from both non-problem domain and PD were used. All copycat
networks achieved at least 93.7% of the performance of the original models with
non-problem domain data, and at least 98.6% using additional data from the PD.
Additionally, the copycat CNN successfully copied at least 97.3% of the
performance of the Microsoft Azure Emotion API. Our results show that it is
possible to create a copycat CNN by simply querying a target network as
black-box with random non-labeled data.Comment: 8 pages, 3 figures, accepted by IJCNN 201