We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:

Download:

Current browse context:

cs.CR

Change to browse by:

References & Citations

DBLP - CS Bibliography

Bookmark

(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo

Computer Science > Cryptography and Security

Title: Harnessing adversarial examples with a surprisingly simple defense

Authors: Ali Borji
Abstract: I introduce a very simple method to defend against adversarial examples. The basic idea is to raise the slope of the ReLU function at the test time. Experiments over MNIST and CIFAR-10 datasets demonstrate the effectiveness of the proposed defense against a number of strong attacks in both untargeted and targeted settings. While perhaps not as effective as the state of the art adversarial defenses, this approach can provide insights to understand and mitigate adversarial attacks. It can also be used in conjunction with other defenses.
Subjects: Cryptography and Security (cs.CR); Computer Vision and Pattern Recognition (cs.CV); Machine Learning (cs.LG)
Cite as: arXiv:2004.13013 [cs.CR]
  (or arXiv:2004.13013v3 [cs.CR] for this version)

Submission history

From: Ali Borji [view email]
[v1] Sun, 26 Apr 2020 03:09:42 GMT (2901kb,D)
[v2] Wed, 29 Apr 2020 22:49:12 GMT (2903kb,D)
[v3] Wed, 3 Jun 2020 02:52:54 GMT (4094kb,D)

Link back to: arXiv, form interface, contact.