TEAM: An Taylor Expansion-Based Method for Generating Adversarial Examples
arXiv:2001.08389
Abstract
Although Deep Neural Networks(DNNs) have achieved successful applications in many fields, they are vulnerable to adversarial examples.Adversarial training is one of the most effective methods to improve the robustness of DNNs, and it is generally considered as solving a saddle point problem that minimizes risk and maximizes perturbation.Therefore, powerful adversarial examples can effectively replicate the situation of perturbation maximization to solve the saddle point problem.The method proposed in this paper approximates the output of DNNs in the input neighborhood by using the Taylor expansion, and then optimizes it by using the Lagrange multiplier method to generate adversarial examples. If it is used for adversarial training, the DNNs can be effectively regularized and the defects of the model can be improved.
arXiv comment25 pages,5 figures,3 tables
References in corpus (5)
- Intriguing properties of neural networks
- Technical Report on the CleverHans v2.1.0 Adversarial Examples Library
- Understanding Adversarial Training: Increasing Local Stability of Neural Nets through Robust Optimization
- Learning with a Strong Adversary
- MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples