A fuzzy-based frame transformation to mitigate the impact of adversarial attacks in deep learning-based real-time video surveillance systems

Abstract

Deep learning (DL) techniques have become integral to smart city projects, including video surveillance systems (VSS). These advanced technologies offer significant benefits, such as enhanced accuracy and efficiency in monitoring and managing urban environments. However, despite their advantages, these systems are not without vulnerabilities. One of the most pressing challenges is their susceptibility to adversarial attacks, which can lead to critical misclassifications during inference. To address these challenges, our research focuses on developing a more robust smart city VSS. Our research unfolds across two pivotal initiatives. In our initial exploration, we introduce a pioneering framework that extends the reach of adversarial attacks to real-time VSS. A practical manifestation involved implementing a real-time face mask surveillance system based on Multi-Task Cascaded Convolutional Networks (MTCNN) for face detection and MobileNet-v2 for face mask classification, subjecting it to the Fast Gradient Sign Method (FGSM) adversarial attack in real-time. In our subsequent endeavor, we propose a sophisticated defense mechanism deploying Fuzzy Image Transformation as a pre-processing unit (FITP). This strategic defense fortification significantly reinforces our real-time VSS against adversarial intrusions. Experimental findings highlight the effectiveness of the proposed adversarial attack framework in real-time, resulting in a marked reduction in the model's performance from a precision (P) of 93 %, recall (R) of 93 %, F1 score (F) of 93 %, and accuracy (A) of 93–22 %, 21 %, 22 %, and 22 %, respectively. However, the post-implementation efficacy of our defense mechanism is striking, enhancing the model's average performance to a noteworthy improvement, with P, R, F, and A ascending to 91 %, 90 %, 91 %, and 91 %. This research illuminates the vulnerabilities intrinsic to VSS in the face of adversarial threats, underscoring the critical need for heightened awareness and the development of robust defense mechanisms before real-world deployment.