Journal
2021 INTERNATIONAL JOINT CONFERENCE ON NEURAL NETWORKS (IJCNN)
Volume -, Issue -, Pages -Publisher
IEEE
DOI: 10.1109/IJCNN52387.2021.9534346
Keywords
Adversarial robustness; Randomization; Regularization; Computational efficiency
Ask authors/readers for more resources
In this study, two training techniques, namely RP-Ensemble and RP-Regularizer, are proposed to enhance the robustness of Neural Networks against adversarial attacks. Both methods leverage random projections to exploit dimensionality reduction and geometric properties of adversarial perturbations, aiming to improve the network's resistance to input manipulations.
We propose two training techniques for improving the robustness of Neural Networks to adversarial attacks, i.e. manipulations of the inputs that are maliciously crafted to fool networks into incorrect predictions. Both methods are independent of the chosen attack and leverage random projections of the original inputs, with the purpose of exploiting both dimensionality reduction and some characteristic geometrical properties of adversarial perturbations. The first technique is called RP-Ensemble and consists of an ensemble of networks trained on multiple projected versions of the original inputs. The second one, named RP-Regularizer, adds instead a regularization term to the training objective.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available