Can the state of relevant neurons in a deep neural networks serve as indicators for detecting adversarial attacks?

Roger Granda, Tinne Tuytelaars, Jose Oramas

We present a method for adversarial attack detection based on the inspection of a sparse set of neurons. We follow the hypothesis that adversarial attacks introduce imperceptible p…