Name
Abstract | ||
|---|---|---|
Adversarial examples can cause catastrophic mistakes in Deep Neural Network (DNNs) based vision systems e.g., for classification, segmentation and object detection. The vulnerability of DNNs against such attacks can prove a major roadblock towards their real-world deployment. Transferability of adversarial examples demand generalizable defenses that can provide cross-task protection. Adversarial training that enhances robustness by modifying target model's parameters lacks such generalizability. On the other hand, different input processing based defenses fall short in the face of continuously evolving attacks. In this paper, we take the first step to combine the benefits of both approaches and propose a self-supervised adversarial training mechanism in the input space. By design, our defense is a generalizable approach and provides significant robustness against the unseen adversarial attacks (e.g. by reducing the success rate of translation-invariant ensemble attack from 82.6% to 31.9% in comparison to previous stateof-the-art). It can be deployed as a plug-and-play solution to protect a variety of vision systems, as we demonstrate for the case of classification, segmentation and detection. Code is available at: https://github.com/ Muzammal-Naseer/NRP. |
Year | DOI | Venue |
|---|---|---|
2020 | 10.1109/CVPR42600.2020.00034 | 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) |
Keywords | DocType | ISSN |
real-world deployment,cross-task protection,target model,self-supervised adversarial training mechanism,generalizable approach,unseen adversarial attacks,segmentation,adversarial robustness,catastrophic mistakes,object detection,input processing based defenses,deep neural network based vision systems | Conference | 1063-6919 |
ISBN | Citations | PageRank |
978-1-7281-7169-2 | 2 | 0.40 |
References | Authors | |
32 | 5 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Muzammal Naseer | 1 | 10 | 4.24 |
| Salman Khan | 2 | 387 | 41.05 |
| Munawar Hayat | 3 | 315 | 19.30 |
| Fahad Shahbaz Khan | 4 | 1622 | 69.24 |
| Fatih Porikli | 5 | 3409 | 169.13 |