Adversarial Examples Detection with Bayesian Neural Network
Not on the map. Why?
Abstract (arXiv)
In this paper, we propose a new framework to detect adversarial examples motivated by the observations that random components can improve the smoothness of predictors and make it easier to simulate the output distribution of a deep neural network. With these observations, we propose a novel Bayesian adversarial example detector, short for BATer, to improve the performance of adversarial example detection. Specifically, we study the distributional difference of hidden layer output between natural and adversarial examples, and propose to use the randomness of the Bayesian neural network to simulate hidden layer output distribution and leverage the distribution dispersion to detect adversarial examples. The advantage of a Bayesian neural network is that the output is stochastic while a deep neural network without random components does not have such characteristics. Empirical results on several benchmark datasets against popular attacks show that the proposed BATer outperforms the state-of-the-art detectors in adversarial example detection.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 53 of its 88 references that are in the map. First posted on arXiv 18 May 2021.
Builds on
53 of 88 references.
References · 53
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
- 2018Spectral Normalization for Generative Adversarial Networkscited by 1,618
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,472
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
38 more
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2016Universal adversarial perturbationscited by 774
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
- 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 499
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
- 2017Mitigating Adversarial Effects Through Randomizationcited by 382
- 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 280
- 2017MagNet: a Two-Pronged Defense against Adversarial Examplescited by 268
- 2017Detecting Adversarial Samples from Artifactscited by 244
- 2017PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examplescited by 243
- 2017On Detecting Adversarial Perturbationscited by 232
- 2018To Trust Or Not To Trust A Classifiercited by 205
- 2018Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learningcited by 203
- 2018Stochastic Activation Pruning for Robust Adversarial Defensecited by 171
- 2017Towards Robust Neural Networks via Random Self-ensemblecited by 158
- 2017EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examplescited by 154
- 2019Sign-OPT: A Query-Efficient Hard-label Adversarial Attackcited by 118
- 2017Noisy Natural Gradient as Variational Inferencecited by 94
- 2019The Odds are Odd: A Statistical Test for Detecting Adversarial Examplescited by 75
- 2016A Boundary Tilting Persepective on the Phenomenon of Adversarial Examplescited by 70
- 2018Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Networkcited by 68
- 2018Adversarial Examples: Opportunities and Challengescited by 62
- 2019Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classificationcited by 55
- 2020Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examplescited by 54
- 2017Adversarial and Clean Data Are Not Twinscited by 52
- 2019ML-LOO: Detecting Adversarial Examples with Feature Attributioncited by 48
- 2020Robustness of Bayesian Neural Networks to Gradient-Based Attackscited by 48
- 2018Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samplescited by 38
- 2017The Robust Manifold Defense: Adversarial Training using Generative Modelscited by 35
- 2019Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attackscited by 35
- 2020Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradientcited by 31
- 2020A General Framework For Detecting Anomalous Inputs to DNN Classifierscited by 24
- 2020Certifiable Robustness to Adversarial State Uncertainty in Deep Reinforcement Learningcited by 23
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2022: 1; 2023: 1.
2 papers.