首页|(AD)(2): Adversarial domain adaptation to defense with adversarial perturbation removal
(AD)(2): Adversarial domain adaptation to defense with adversarial perturbation removal
扫码查看
点击上方二维码区域，可以放大扫码查看
原文链接
NSTL
Elsevier
Deep Neural Networks (DNNs) are demonstrated to be vulnerable to adversarial examples, which are crafted by adding adversarial perturbations to the legitimate examples. To address this issue, some defense methods have been proposed. Among them, the adversarial training (AT) is a popular method to improve the robustness of DNNs. However, theory analysis has shown that in the adversarial training framework, the improvement of the robustness will lead to a decline of standard accuracy. In this paper, we propose a modularized defense framework, namely Adversarial Domain Adaptation to Defense ((AD)(2)). Different from all adversarial training methods, (AD)(2) detects adversarial example using a generative algorithm and applies the adversarial domain adaptation method to remove adversarial perturbation. Experimental results show that (AD)(2) is effective to remove the adversarial perturbation and mitigate the odds between the robustness and standard accuracy for DNNs. (C) 2021 Elsevier Ltd. All rights reserved.
Deep learningAdversarial exampleDomain adaptationROBUSTNESS
NSTL
Elsevier
