We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:

Download:

Current browse context:

cs.CV

Change to browse by:

cs

References & Citations

DBLP - CS Bibliography

Bookmark

(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo ScienceWISE logo

Computer Science > Computer Vision and Pattern Recognition

Title: A Minimax Approach Against Multi-Armed Adversarial Attacks Detection

Abstract: Multi-armed adversarial attacks, in which multiple algorithms and objective loss functions are simultaneously used at evaluation time, have been shown to be highly successful in fooling state-of-the-art adversarial examples detectors while requiring no specific side information about the detection mechanism. By formalizing the problem at hand, we can propose a solution that aggregates the soft-probability outputs of multiple pre-trained detectors according to a minimax approach. The proposed framework is mathematically sound, easy to implement, and modular, allowing for integrating existing or future detectors. Through extensive evaluation on popular datasets (e.g., CIFAR10 and SVHN), we show that our aggregation consistently outperforms individual state-of-the-art detectors against multi-armed adversarial attacks, making it an effective solution to improve the resilience of available methods.
Comments: 10 pages, 13 figures, 14 tables
Subjects: Computer Vision and Pattern Recognition (cs.CV)
Cite as: arXiv:2302.02216 [cs.CV]
  (or arXiv:2302.02216v1 [cs.CV] for this version)

Submission history

From: Federica Granese [view email]
[v1] Sat, 4 Feb 2023 18:21:22 GMT (1116kb,D)

Link back to: arXiv, form interface, contact.