General information
Organisation
The French Alternative Energies and Atomic Energy Commission (CEA) is a key player in research, development and innovation in four main areas :
• defence and security,
• nuclear energy (fission and fusion),
• technological research for industry,
• fundamental research in the physical sciences and life sciences.
Drawing on its widely acknowledged expertise, and thanks to its 16000 technicians, engineers, researchers and staff, the CEA actively participates in collaborative projects with a large number of academic and industrial partners.
The CEA is established in ten centers spread throughout France
Reference
SL-DRT-25-0648
Direction
DRT
Thesis topic details
Category
Technological challenges
Thesis topics
Defense of scene analysis models against adversarial attacks
Contract
Thèse
Job description
In many applications, scene analysis modules such as object detection and recognition, or pose recognition, are required. Deep neural networks are nowadays among the most efficient models to perform a large number of vision tasks, sometimes simultaneously in case of multitask learning. However, it has been shown that they are vulnerable to adversarial attacks: Indeed, it is possible to add to the input data some perturbations imperceptible by the human eye which undermine the results during the inference made by the neural network. However, a guarantee of reliable results is essential for applications such as autonomous vehicles or person search for video surveillance, where security is critical. Different types of adversarial attacks and defenses have been proposed, most often for the classification problem (of images, in particular). Some works have addressed the attack of embedding optimized by metric learning, especially used for open-set tasks such as object re-identification, facial recognition or image retrieval by content. The types of attacks have multiplied: some universal, other optimized on a particular instance. The proposed defenses must deal with new threats without sacrificing too much of the initial performance of the model. Protecting input data from adversarial attacks is essential for decision systems where security vulnerabilities are critical. One way to protect this data is to develop defenses against these attacks. Therefore, the objective will be to study and propose different attacks and defenses applicable to scene analysis modules, especially those for object detection and object instance search in images.
University / doctoral school
Sciences et Technologies de l’Information et de la Communication (STIC)
Paris-Saclay
Thesis topic location
Site
Saclay
Requester
Position start date
01/09/2025
Person to be contacted by the applicant
AUDIGIER Romaric
romaric.audigier@cea.fr
CEA
DRT/DIASI//LVA
CEA SACLAY - Nano INNOV
DIASI/SIALV/LVA
Bat. 861 - PC 184
91191 Gif-sur-Yvette
01 69 08 01 06
Tutor / Responsible thesis director
LUVISON Bertrand
bertrand.luvison@cea.fr
CEA
DRT/DIASI//LVA
Institut CEA LIST
CEA Saclay - Nano-INNOV
Bât 861 - PC 184
F91191 Gif-sur-Yvette Cedex
01 69 08 01 37
En savoir plus
https://list.cea.fr/en/
https://kalisteo.cea.fr/