Meta Perturbation Generation Network for Text-Based CAPTCHA

Published: 2023, Last Modified: 23 Jan 2026SecureComm (1) 2023EveryoneRevisionsBibTeXCC BY-SA 4.0
Abstract: With the development of text-based CAPTCHA, many adversarial example generation methods for text-based CAPTCHA have been proposed. However, the perturbation factors generated by the existing methods are simple and easy to be attacked. In this paper, we present a framework for meta perturbation text-based CAPTCHA generation (denoted as MAPFN), which enhances the security of text-based CAPTCHA and makes the perturbed images friendly for humans. More specifically, we propose a meta perturbation generation network (MPGN) to construct rich and effective perturbation factors. To this end, we devise a perturbation feature fusion module (PFFM) to fuse the perturbation factors generated by MPGN into a new perturbation factor, which can be applied to the CAPTCHA image to make it similar to the origin while being effectively against the attacker models. Extensive experiments on 8 real website CAPTCHA datasets show the excellent performance of the proposed MAPFN. (e.g., attack accuracy falls from 93.99% to 0.98% on the NSFC dataset).
Loading