Pause
Read
CEA vacancy search engine

Defense of scene analysis models against adversarial attacks

Previous vacancy
 240 / 493 vacancy 
Next vacancy

Thesis topic details

General information

Organisation

The French Alternative Energies and Atomic Energy Commission (CEA) is a key player in research, development and innovation in four main areas :
• defence and security,
• nuclear energy (fission and fusion),
• technological research for industry,
• fundamental research in the physical sciences and life sciences.

Drawing on its widely acknowledged expertise, and thanks to its 16000 technicians, engineers, researchers and staff, the CEA actively participates in collaborative projects with a large number of academic and industrial partners.

The CEA is established in ten centers spread throughout France
  

Reference

SL-DRT-25-0648  

Direction

DRT

Thesis topic details

Category

Technological challenges

Thesis topics

Defense of scene analysis models against adversarial attacks

Contract

Thèse

Job description

In many applications, scene analysis modules such as object detection and recognition, or pose recognition, are required. Deep neural networks are nowadays among the most efficient models to perform a large number of vision tasks, sometimes simultaneously in case of multitask learning. However, it has been shown that they are vulnerable to adversarial attacks: Indeed, it is possible to add to the input data some perturbations imperceptible by the human eye which undermine the results during the inference made by the neural network. However, a guarantee of reliable results is essential for applications such as autonomous vehicles or person search for video surveillance, where security is critical. Different types of adversarial attacks and defenses have been proposed, most often for the classification problem (of images, in particular). Some works have addressed the attack of embedding optimized by metric learning, especially used for open-set tasks such as object re-identification, facial recognition or image retrieval by content. The types of attacks have multiplied: some universal, other optimized on a particular instance. The proposed defenses must deal with new threats without sacrificing too much of the initial performance of the model. Protecting input data from adversarial attacks is essential for decision systems where security vulnerabilities are critical. One way to protect this data is to develop defenses against these attacks. Therefore, the objective will be to study and propose different attacks and defenses applicable to scene analysis modules, especially those for object detection and object instance search in images.

University / doctoral school

Sciences et Technologies de l’Information et de la Communication (STIC)
Paris-Saclay

Thesis topic location

Site

Saclay

Requester

Position start date

01/09/2025

Person to be contacted by the applicant

AUDIGIER Romaric romaric.audigier@cea.fr
CEA
DRT/DIASI//LVA
CEA SACLAY - Nano INNOV
DIASI/SIALV/LVA
Bat. 861 - PC 184
91191 Gif-sur-Yvette
01 69 08 01 06

Tutor / Responsible thesis director

LUVISON Bertrand bertrand.luvison@cea.fr
CEA
DRT/DIASI//LVA
Institut CEA LIST
CEA Saclay - Nano-INNOV
Bât 861 - PC 184
F91191 Gif-sur-Yvette Cedex
01 69 08 01 37

En savoir plus


https://list.cea.fr/en/
https://kalisteo.cea.fr/