Defending Adversarial Examples by Negative Correlation Ensemble
Not on the map. Why?
Abstract (arXiv)
The security issues in DNNs, such as adversarial examples, have attracted much attention. Adversarial examples refer to the examples which are capable to induce the DNNs return completely predictions by introducing carefully designed perturbations. Obviously, adversarial examples bring great security risks to the development of deep learning. Recently, Some defense approaches against adversarial examples have been proposed, however, in our opinion, the performance of these approaches are still limited. In this paper, we propose a new ensemble defense approach named the Negative Correlation Ensemble (NCEn), which achieves compelling results by introducing gradient directions and gradient magnitudes of each member in the ensemble negatively correlated and at the same time, reducing the transferability of adversarial examples among them. Extensive experiments have been conducted, and the results demonstrate that NCEn can improve the adversarial robustness of ensembles effectively.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 33 of its 50 references that are in the map. First posted on arXiv 11 Jun 2022.
Builds on
33 of 50 references.
References · 33
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Generative Adversarial Networkscited by 5,603
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2016Adversarial examples in the physical worldcited by 1,762
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2018Spatial Temporal Graph Convolutional Networks for Skeleton-Based Action Recognitioncited by 1,199
- 2016Adversarial Machine Learning at Scalecited by 934
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2016Universal adversarial perturbationscited by 774
21 more
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
- 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
- 2017MagNet: a Two-Pronged Defense against Adversarial Examplescited by 268
- 2019Improving Adversarial Robustness via Promoting Ensemble Diversitycited by 213
- 2016A study of the effect of JPG compression on adversarial imagescited by 196
- 2020Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNetscited by 165
- 2014Deep Learning Face Representation by Joint Identification-Verificationcited by 162
- 2018AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networkscited by 137
- 2019Improving Adversarial Robustness of Ensembles with Diversity Trainingcited by 69
- 2017Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networkscited by 31
- 2017Regularizing deep networks using efficient layerwise adversarial trainingcited by 24
- 2017Robustness to Adversarial Examples through an Ensemble of Specialistscited by 21
- 2018Gradient Adversarial Training of Neural Networkscited by 17
- 2017Training Ensembles to Detect Adversarial Examplescited by 10
- 2018Detecting Adversarial Examples via Key-based Networkcited by 2
Built on by
Not cited yet.