![](/images/graphics-bg.png)
Complete Defense Framework to Protect Deep Neural Networks against Adversarial Examples
Joint Authors
Sun, Guangling
Su, Yuying
Qin, Chuan
Xu, Wenbo
Lu, Xiaofeng
Ceglowski, Andrzej
Source
Mathematical Problems in Engineering
Issue
Vol. 2020, Issue 2020 (31 Dec. 2020), pp.1-17, 17 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2020-05-11
Country of Publication
Egypt
No. of Pages
17
Main Subjects
Abstract EN
Although Deep Neural Networks (DNNs) have achieved great success on various applications, investigations have increasingly shown DNNs to be highly vulnerable when adversarial examples are used as input.
Here, we present a comprehensive defense framework to protect DNNs against adversarial examples.
First, we present statistical and minor alteration detectors to filter out adversarial examples contaminated by noticeable and unnoticeable perturbations, respectively.
Then, we ensemble the detectors, a deep Residual Generative Network (ResGN), and an adversarially trained targeted network, to construct a complete defense framework.
In this framework, the ResGN is our previously proposed network which is used to remove adversarial perturbations, and the adversarially trained targeted network is a network that is learned through adversarial training.
Specifically, once the detectors determine an input example to be adversarial, it is cleaned by ResGN and then classified by the adversarially trained targeted network; otherwise, it is directly classified by this network.
We empirically evaluate the proposed complete defense on ImageNet dataset.
The results confirm the robustness against current representative attacking methods including fast gradient sign method, randomized fast gradient sign method, basic iterative method, universal adversarial perturbations, DeepFool method, and Carlini & Wagner method.
American Psychological Association (APA)
Sun, Guangling& Su, Yuying& Qin, Chuan& Xu, Wenbo& Lu, Xiaofeng& Ceglowski, Andrzej. 2020. Complete Defense Framework to Protect Deep Neural Networks against Adversarial Examples. Mathematical Problems in Engineering،Vol. 2020, no. 2020, pp.1-17.
https://search.emarefa.net/detail/BIM-1201037
Modern Language Association (MLA)
Sun, Guangling…[et al.]. Complete Defense Framework to Protect Deep Neural Networks against Adversarial Examples. Mathematical Problems in Engineering No. 2020 (2020), pp.1-17.
https://search.emarefa.net/detail/BIM-1201037
American Medical Association (AMA)
Sun, Guangling& Su, Yuying& Qin, Chuan& Xu, Wenbo& Lu, Xiaofeng& Ceglowski, Andrzej. Complete Defense Framework to Protect Deep Neural Networks against Adversarial Examples. Mathematical Problems in Engineering. 2020. Vol. 2020, no. 2020, pp.1-17.
https://search.emarefa.net/detail/BIM-1201037
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1201037