MadNet: Using a MAD Optimization for Defending Against Adversarial Attacks

Shai Rozenberg, Gal Elidan, Ran El-Yaniv

This paper is concerned with the defense of deep models against adversarial attacks. Inspired by the certificate defense approach, we propose a maximal adversarial distortion (MAD)…