Defending Against Adversarial Attacks by Suppressing the Largest Eigenvalue of Fisher Information Matrix

Chaomin Shen, Yaxin Peng, Guixu Zhang +1

We propose a scheme for defending against adversarial attacks by suppressing the largest eigenvalue of the Fisher information matrix (FIM). Our starting point is one explanation on…