Approximate Manifold Defense Against Multiple Adversarial Perturbations

Jay Nandy, Wynne Hsu, Mong Li Lee

Existing defenses against adversarial attacks are typically tailored to a specific perturbation type. Using adversarial training to defend against multiple types of perturbation re…