REVIEW 1 cited by
Training Ensembles to Detect Adversarial Examples
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
read the original abstract
We propose a new ensemble method for detecting and classifying adversarial examples generated by state-of-the-art attacks, including DeepFool and C&W. Our method works by training the members of an ensemble to have low classification error on random benign examples while simultaneously minimizing agreement on examples outside the training distribution. We evaluate on both MNIST and CIFAR-10, against oblivious and both white- and black-box adversaries.
Forward citations
Cited by 1 Pith paper
-
SHIELD: Secure Hypernetworks for Incremental Expansion Learning Defense
SHIELD uses a hypernetwork with IBP training and a new Interval MixUp technique to achieve certified robustness in continual learning, reporting state-of-the-art adversarial accuracy on MNIST, CIFAR-100, and miniImage...
Discussion (0). Sign in to comment.