Removing high-frequency image components with a differentiable box filter improves robustness to black-box adversarial attacks and combines with TRADES.
Explaining and harnessing adversarial examples
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Adversarial Defense by Suppressing High-frequency Components
Removing high-frequency image components with a differentiable box filter improves robustness to black-box adversarial attacks and combines with TRADES.