Current browse context:
cs.LG
Change to browse by:
References & Citations
Computer Science > Machine Learning
Title: Adversarial Detection by Approximation of Ensemble Boundary
(Submitted on 18 Nov 2022 (v1), last revised 24 Jan 2024 (this version, v4))
Abstract: A new method of detecting adversarial attacks is proposed for an ensemble of Deep Neural Networks (DNNs) solving two-class pattern recognition problems. The ensemble is combined using Walsh coefficients which are capable of approximating Boolean functions and thereby controlling the complexity of the ensemble decision boundary. The hypothesis in this paper is that decision boundaries with high curvature allow adversarial perturbations to be found, but change the curvature of the decision boundary, which is then approximated in a different way by Walsh coefficients compared to the clean images. By observing the difference in Walsh coefficient approximation between clean and adversarial images, it is shown experimentally that transferability of attack may be used for detection. Furthermore, approximating the decision boundary may aid in understanding the learning and transferability properties of DNNs. While the experiments here use images, the proposed approach of modelling two-class ensemble decision boundaries could in principle be applied to any application area. Code for approximating Boolean functions using Walsh coefficients: this https URL
Submission history
From: Terry Windeatt [view email][v1] Fri, 18 Nov 2022 13:26:57 GMT (920kb)
[v2] Mon, 28 Nov 2022 16:39:49 GMT (667kb)
[v3] Tue, 13 Dec 2022 16:03:26 GMT (617kb)
[v4] Wed, 24 Jan 2024 11:38:25 GMT (414kb,D)
Link back to: arXiv, form interface, contact.