On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses
classification
💻 cs.CV
cs.CRcs.LGstat.ML
keywords
adversarialcvprdefenseswhite-boxaccuracyappearedapplyingdefended
read the original abstract
Neural networks are known to be vulnerable to adversarial examples. In this note, we evaluate the two white-box defenses that appeared at CVPR 2018 and find they are ineffective: when applying existing techniques, we can reduce the accuracy of the defended models to 0%.
This paper has not been read by Pith yet.
Forward citations
Cited by 2 Pith papers
-
Stateful Detection of Black-Box Adversarial Attacks
The paper argues for stateful defenses over stateless ones to detect adversarial example generation via query history and introduces query blinding as a counter-attack.
-
Connecting Lyapunov Control Theory to Adversarial Attacks
Connects Lyapunov control theory to a provable defense against weaker adversarial attacks on neural networks.
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.