Jacobian Norm with Selective Input Gradient Regularization for Improved and Interpretable Adversarial Defense

Deyin Liu, Lin Wu, Haifeng Zhao +3

Deep neural networks (DNNs) are known to be vulnerable to adversarial examples that are crafted with imperceptible perturbations, i.e., a small change in an input image can induce…