Title
Retrieval-Augmented Convolutional Neural Networks Against Adversarial Examples
Abstract
We propose a retrieval-augmented convolutional network (RaCNN) and propose to train it with local mixup, a novel variant of the recently proposed mixup algorithm. The proposed hybrid architecture combining a convolutional network and an off-the-shelf retrieval engine was designed to mitigate the adverse effect of off-manifold adversarial examples, while the proposed local mixup addresses on-manifold ones by explicitly encouraging the classifier to locally behave linearly on the data manifold. Our evaluation of the proposed approach against seven readily available adversarial attacks on three datasets CIFAR-10, SVHN and ImageNet demonstrate the improved robustness compared to a vanilla convolutional network, and comparable performance with the state-of-the-art reactive defense approaches.
Year
DOI
Venue
2019
10.1109/CVPR.2019.01183
2019 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR 2019)
Field
DocType
ISSN
Pattern recognition,Convolutional neural network,Computer science,Artificial intelligence,Adversarial system
Conference
1063-6919
Citations 
PageRank 
References 
0
0.34
0
Authors
3
Name
Order
Citations
PageRank
junbo zhao169827.58
Kyunghyun Cho2265.53
(Junbo) Jake Zhao300.34