Removing high-frequency image components with a differentiable box filter improves robustness to black-box adversarial attacks and combines with TRADES.
Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Adversarial Defense by Suppressing High-frequency Components
Removing high-frequency image components with a differentiable box filter improves robustness to black-box adversarial attacks and combines with TRADES.