Improving Adversarial Robustness via Activation Amplification and Attenuation

Taïga Gonçalves, Yongsong Huang, Tomo Miyazaki +1

The existence of adversarial attacks is often attributed to the presence of non-robust features in neural networks. While prior defenses reduce their impact via pruning, masking, o…