With the rapid evolution of advanced image compression, DNN-based learned image compression has emerged as the promising approach for transmitting images in many security-critical applications, such as cloud-based face recognition and autonomous driving, due to its superior performance over traditional compression. There is a pressing need to fully investigate the robustness of a classification system post-processed by learned image compression. To bridge this research gap, we explore the adversarial attack on Learned Image Compression Classification System (LICCS) that targets image classification models that utilize learned image compressors as preprocessing modules. To perform an adversarial attack on an image within the LICCS, the goal is to introduce the adversarial perturbation δ to the source image X that causes the reconstructed adversarial examples gs(Q(ga(X+δ))) to be misclassified by the classification model, which can be formulated as follows:\begin{equation*}\begin{array}{ll} {\mathop {\arg \max }\limits_i f{{\left({{g_s}\left({Q\left({{g_a}\left({{\mathbf{X + \delta }}}\right)}\right)}\right)}\right)}_i} \ne y,}&{{\text{s}}{\text{.t}}{\text{.}}\parallel \delta {\parallel _p} \leq \varepsilon .} \end{array}\tag{1}\end{equation*}

In this paper, we introduce an imperceptible adversarial attack approach designed to effectively degrade the reconstruction quality of LIC, resulting in the reconstructed image being severely disrupted by noise where identifying any object in the reconstructed image is virtually impossible. More specifically, we generate adversarial examples by introducing a Frobenius norm-based loss function to maximize the discrepancy between original images and reconstructed images from adversarial examples in order to corrupt the reconstructed image severely.

In screen content video, the spatial correlation among pixels shows different characteristics as compared to natural content video. Intra-picture motion compensation (or intra block copy in HEVC) plays a key role in reducing the bit rate of representing high resolution video with contents such as text and graphics. The efficiency of intra block copy is highly related to the accuracy of block vector prediction. In this paper, several block vector prediction methods are proposed to improve the performance of intra block copy technology in HEVC screen content coding extension. Simulation results show that an average bit rate reduction of 8.0% can be achieved for typical 1080p text and graphics sequences in all intra configuration, when compared to the standard's test model SCM-1.0. As a result, some of the proposed methods have been adopted into the standard working draft and reference software.