Minimax Defense against Gradient-based Adversarial Attacks

Blerta Lindqvist, Rauf Izmailov

State-of-the-art adversarial attacks are aimed at neural network classifiers. By default, neural networks use gradient descent to minimize their loss function. The gradient of a cl…