Timezone: »

 
Spotlight
Towards Robust Detection of Adversarial Examples
Tianyu Pang · Chao Du · Yinpeng Dong · Jun Zhu

Tue Dec 04 01:40 PM -- 01:45 PM (PST) @ Room 517 CD
in Tue Track 3 -- Session 2 »

Although the recent progress is substantial, deep learning methods can be vulnerable to the maliciously generated adversarial examples. In this paper, we present a novel training procedure and a thresholding test strategy, towards robust detection of adversarial examples. In training, we propose to minimize the reverse cross-entropy (RCE), which encourages a deep network to learn latent representations that better distinguish adversarial examples from normal ones. In testing, we propose to use a thresholding strategy as the detector to filter out adversarial examples for reliable predictions. Our method is simple to implement using standard algorithms, with little extra training cost compared to the common cross-entropy minimization. We apply our method to defend various attacking methods on the widely used MNIST and CIFAR-10 datasets, and achieve significant improvements on robust predictions under all the threat models in the adversarial setting.

Author Information

Tianyu Pang (Tsinghua University)
Chao Du (Tsinghua University)
Yinpeng Dong (Tsinghua University)
Jun Zhu (Tsinghua University)

Related Events (a corresponding poster, oral, or spotlight)

More from the Same Authors