用于文本验证码生成的随机扰动优化网络

曾嘉琪; 吴焯婷; 吴泽楷; 杨振国; 刘文印

doi:10.12052/gdutxb.230051

欢迎来到能源电力期刊网！

English Version 期刊登录

您当前的位置：

首页 >

文章列表页 >

用于文本验证码生成的随机扰动优化网络

计算机科学与技术 | 更新时间：2026-05-27

- 用于文本验证码生成的随机扰动优化网络
- Perturbation Optimization Network with Randomization for Text-based CAPTCHAs Generation
- 广东工业大学学报 2024年41卷第3期页码：81-90
- 作者机构：
  
  广东工业大学计算机学院,广东,广州,510006
- 作者简介：
- 基金信息：
  
  国家自然科学基金资助项目(91748107, 61902077);广东省引进创新科研团队计划项目(2014ZT05G157);广东省基础与应用基础研究基金资助项目(2020A1515010616);广东省科技创新战略专项资金资助项目(pdjh2020a0173);广州市科技计划项目(202102020524)
- DOI：10.12052/gdutxb.230051
  中图分类号： TP391.2
- 网络首发：2024-05-25，
  
  纸质出版：2024
- 稿件说明：
移动端阅览
曾嘉琪, 吴焯婷, 吴泽楷, 杨振国, 刘文印. 用于文本验证码生成的随机扰动优化网络[J]. 广东工业大学学报, 2024, 41(3): 81-90.

Zeng Jia-qi, Wu Zhuo-ting, Wu Ze-kai, et al. Perturbation Optimization Network with Randomization for Text-based CAPTCHAs Generation[J]. 2024, 41(3): 81-90.
曾嘉琪, 吴焯婷, 吴泽楷, 杨振国, 刘文印. 用于文本验证码生成的随机扰动优化网络[J]. 广东工业大学学报, 2024, 41(3): 81-90. DOI： 10.12052/gdutxb.230051.

Zeng Jia-qi, Wu Zhuo-ting, Wu Ze-kai, et al. Perturbation Optimization Network with Randomization for Text-based CAPTCHAs Generation[J]. 2024, 41(3): 81-90. DOI： 10.12052/gdutxb.230051.

摘要

文本验证码具有友好和易于理解的特点，被广泛应用于众多互联网应用的安全防御机制中。传统的文本验证码通过将字符扭曲变形或者增加背景噪声来提高安全性，但随着深度学习技术的发展，其安全性难以为继且过度变形的字符会对人类用户识别带来新的难题。为了解决上述问题，本文提出了一种带有随机化策略的扰动优化框架 (Perturbation Optimization Network with Randomization for Text-based CAPTCHAs Generation

PORG)，用于生成对人类友好但机器难以破解的文本验证码图像。该框架基于先进的扰动方法设计出扰动生成网络 (Perturbation Generation Network

PGN)，构建丰富的图像扰动因子并应用随机化策略生成多样化的验证码图像。现有方法所生成的扰动因子容易破坏验证码图像传递的视觉信息，对人类用户的识别造成负面影响，违背了验证码设计的初衷，因此本文提出了一种扰动优化网络 (Perturbation Optimization Network

PON) 对生成的扰动因子进行优化，通过在图像特征层面上扩展距离并在全局层面上缩小差距，使得所生成的验证码在保持人类友好性的同时有效地对抗攻击者模型。本研究在8个真实世界数据集上进行的大量实验，证明了所提出框架模型的优越性，例如在CNKI数据集上，攻击模型的准确率从90.03%降至0.12%。

Abstract

Text-based CAPTCHAs are friendly and easy to understand

which have been widely used in the security defense mechanism of many Internet applications. Traditional text-based CAPTCHAs improve security by distorting characters or adding background noise. With the development of deep learning

its security is threatened and over-deformed characters will bring new problems to human. To address this

this paper designs a perturbation optimization framework with randomization strategy for text-based CAPTCHAs generation (denoted as PORG)

which is friendly for human but difficult for machines. Specifically

the proposed PORG devises a perturbation generation network (PGN) based on current advanced and stable perturbation methods to construct multiple perturbation factors and applies a randomization strategy to generate diverse perturbed images. In particular

the perturbation factors generated by existing methods destroy the visual information conveyed by the CAPTCHA images. To this end

a perturbation optimization network (PON) is designed to control the introduced perturbation factors by extending the distance at feature-level and narrowing the gap at global-level

which makes the generated CAPTCHAs remain human-friendly while effectively treating the attacker model. Extensive experiments conducted on eight real-world datasets show the outperformance of the proposed PORG (e.g.

attack accuracy is dropped from 90.03% to 0.12% on the CNKI dataset).

关键词

Keywords

references

AHN L V, BLUM M, HOPPER N J, et al . CAPTCHA: using hard AI problems for security[C ] // 2003 International Conference on the Theory and Application of Cryptographic Techniques (Eurocrypt) . Heidelberg: Springer, 2003: 294-311.

JIA X, XIAO J, WU C. TICS: text–image-based semantic CAPTCHA synthesis via multi-condition adversarial learning [J]. The Visual Computer, 2022, 38(3): 963-975.

SHI C, JI S, LIU Q, et al . Text CAPTCHA is dead? a large scale deployment and empirical study[C ] // LIGATTI J, OU X, KATZ J, et al . 2020 ACM Conference on Computer and Communications Security (CCS) . USA: ACM, 2020: 1391-1406.

HOSSEN I, HEI X. aaeCAPTCHA: the design and implementation of audio adversarial CAPTCHA[C]// 2022 IEEE 7th European Symposium on Security and Privacy (EuroSP) . Genoa: IEEE, 2022: 430-447.

GAO S, MOHAMED M, SAXENA N, et al . Gaming the game: Defeating a game CAPTCHA with efficient and robust hybrid attacks[C ] // 2014 IEEE International Conference on Multimedia and Expo (ICME) . Chengdu: IEEE Computer Society, 2014: 1-6.

SHAO R, SHI Z, YI J, et al . Robust text CAPTCHAs using adversarial examples[C ] // 2022 IEEE International Conference on Big Data (Big Data) . Osaka: IEEE, 2022: 1495-1504.

BURSZTEIN E, MARTIN M, MITCHELL J. Text-based CAPTCHA strengths and weaknesses[C]// 2011 the 18th ACM Conference on Computer and Communications Security (CCS) . Chicago: ACM, 2011: 125-138.

SHEN Y Y, ZHANG S F, CAO J X. A security enhancement method of CAPTCHA based on adversarial samples [J]. Cyberspace Security, 2020, 11(8): 81-85.

SHI C, XU X, JI S, et al . Adversarial CAPTCHAs [J ] . IEEE Transactions on Cybernetics, 2022, 52(7): 6095-6108.

KWON H, YOON H, PARK K W. Robust CAPTCHA image generation enhanced with adversarial example methods [J]. IEICE Transactions on Information and Systems, 2020, 103-D(4): 879-882.

PAPERNOT N, MCDANIEL P, JHA S, et al . The limitations of deep learning in adversarial settings[C ] // 2016 IEEE European Symposium on Security and Privacy (EuroSP) . Saarbrucken: IEEE, 2016: 372-387.

ZHENG W, WANG W, REN W, et al . A user behavior-based random distribution scheme for adversarial example generated CAPTCHA[C ] // 2021 IEEE Intl Conf on Parallel Distributed Processing with Applications, Big Data Cloud Computing, Sustainable Computing Communications, Social Computing Networking (ISPA/BDCloud/SocialCom/SustainCom) . New York: IEEE, 2021: 1215-1221.

GRAVES A, FERNNDEZ S, GOMEZ F, et al . Connectionist temporal classification: labelling unsegmented sequence data with recurrent neural networks[C ] // 2006 23rd International Conference on Machine Learning (ICML) . Pittsburgh: ACM, 2006: 369-376.

GATYS L A, ECKER A S, BETHGE M. Image style transfer using convolutional neural networks[C]// 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) . Las Vegas: IEEE Computer Society, 2016: 2414-2423.

HE K, ZHANG X, REN S, et al . Deep residual learning for image recognition[C ] // 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) . Las Vegas: IEEE Computer Society, 2016: 770-778.

AKHTAR N, MIAN A. Threat of adversarial attacks on deep learning in computer vision: a survey [J]. IEEE Access, 2018, 6: 14410-14430.

DONG Y, LIAO F, PANG T, et al . Boosting adversarial attacks with momentum[C ] // 2018 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) . Salt Lake City: IEEE Computer Society, 2018: 9185-9193.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

插件技术在漏洞分类扫描中的应用

融合沟道倾斜角的3D NAND存储单元建模及编程策略优化

SCA-YOLO: 基于可变形卷积与上下文感知注意力的实时目标检测

面向灾后救援的多无人机通感算一体化资源分配优化方法

双模态迭代交叉注意力融合集成框架