Title
Adversarial Defense Via Learning To Generate Diverse Attacks
Abstract
With the remarkable success of deep learning, Deep Neural Networks (DNNs) have been applied as dominant tools to various machine learning domains. Despite this success, however, it has been found that DNNs are surprisingly vulnerable to malicious attacks; adding a small, perceptually indistinguishable perturbations to the data can easily degrade classification performance. Adversarial training is an effective defense strategy to train a robust classifier. In this work, we propose to utilize the generator to learn how to create adversarial examples. Unlike the existing approaches that create a one-shot perturbation by a deterministic generator, we propose a recursive and stochastic generator that produces much stronger and diverse perturbations that comprehensively reveal the vulnerability of the target classifier. Our experiment results on MNIST and CIFAR-10 datasets show that the classifier adversarially trained with our method yields more robust performance over various white-box and black-box attacks.
Year
DOI
Venue
2019
10.1109/ICCV.2019.00283
2019 IEEE/CVF INTERNATIONAL CONFERENCE ON COMPUTER VISION (ICCV 2019)
Field
DocType
Volume
Computer vision,Computer science,Human–computer interaction,Artificial intelligence,Adversarial system
Conference
2019
Issue
ISSN
Citations 
1
1550-5499
3
PageRank 
References 
Authors
0.41
9
4
Name
Order
Citations
PageRank
Yunseok Jang1131.88
Tianchen Zhao290.82
Seunghoon Hong389930.34
Honglak Lee46247398.39