Purifying Adversarial Perturbation with Adversarially Trained Auto-encoders
arXiv:1905.10729
Abstract
Machine learning models are vulnerable to adversarial examples. Iterative adversarial training has shown promising results against strong white-box attacks. However, adversarial training is very expensive, and every time a model needs to be protected, such expensive training scheme needs to be performed. In this paper, we propose to apply iterative adversarial training scheme to an external auto-encoder, which once trained can be used to protect other models directly. We empirically show that our model outperforms other purifying-based methods against white-box attacks, and transfers well to directly protect other base models with different architectures.
References in corpus (17)
- Towards Deep Learning Models Resistant to Adversarial Attacks
- Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
- Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality
- Countering Adversarial Images using Input Transformations
- Technical Report on the CleverHans v2.1.0 Adversarial Examples Library
- Robustness May Be at Odds with Accuracy
- PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples
- Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models
- Stochastic Activation Pruning for Robust Adversarial Defense
- Mitigating Adversarial Effects Through Randomization
- MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples
- The Robust Manifold Defense: Adversarial Training using Generative Models
- On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses
- Feature Denoising for Improving Adversarial Robustness
- APE-GAN: Adversarial Perturbation Elimination with GAN
- PuVAE: A Variational Autoencoder to Purify Adversarial Examples
- Defense-VAE: A Fast and Accurate Defense against Adversarial Attacks