Exploring the relationship between architectural design and adversarially robust generalization

A Liu, S Tang, S Liang, R Gong… - Proceedings of the …, 2023 - openaccess.thecvf.com
Adversarial training has been demonstrated to be one of the most effective remedies for
defending adversarial examples, yet it often suffers from the huge robustness generalization …

Exploring the relationship between architecture and adversarially robust generalization

A Liu, S Tang, S Liang, R Gong, B Wu, X Liu… - arXiv preprint arXiv …, 2022 - arxiv.org
Adversarial training has been demonstrated to be one of the most effective remedies for
defending adversarial examples, yet it often suffers from the huge robustness generalization …

Clarifying the Behavior and the Difficulty of Adversarial Training

X Cheng, H Zhang, Y Xin, W Shen… - Proceedings of the AAAI …, 2024 - ojs.aaai.org
Adversarial training is usually difficult to optimize. This paper provides conceptual and
analytic insights into the difficulty of adversarial training via a simple theoretical study, where …

[PDF][PDF] Early layers are more important for adversarial robustness

C Bakiskan, M Cekic, U Madhow - … 2022 Workshop on New Frontiers in …, 2022 - par.nsf.gov
Adversarial training and its variants have become the de facto standard for combatting
against adversarial attacks in machine learning models. In this paper, we seek insight into …

Why Adversarial Training of ReLU Networks Is Difficult?

X Cheng, H Zhang, Y Xin, W Shen, J Ren… - arXiv preprint arXiv …, 2022 - arxiv.org
This paper mathematically derives an analytic solution of the adversarial perturbation on a
ReLU network, and theoretically explains the difficulty of adversarial training. Specifically …

[图书][B] Structural Defense Techniques in Adversarial Machine Learning

C Bakiskan - 2022 - search.proquest.com
Over the last decade, deep neural networks (DNNs) have become an increasingly popular
choice for researchers looking to take on previously unsolved problems. With the popularity …