Adversarial Purification with the Manifold Hypothesis
In this work, we formulate a novel framework for adversarial robustness using the manifold hypothesis. This framework provides sufficient conditions for defending against adversarial examples. We develop an adversarial purification method with this framework. Our method combines manifold learning with variational inference to provide adversarial robustness without the need for expensive adversarial training. Experimentally, our approach can provide adversarial robustness even if attackers are aware of the existence of the defense. In addition, our method can also serve as a test-time defense mechanism for variational autoencoders.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial PurificationAdversarial RobustnessVariational InferenceMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
ZeroPur: Succinct Training-Free Adversarial Purification
Adversarial purification is a kind of defense technique that can defend against various unseen adversarial attacks without modifying the victim classifier. Existing methods often depend on external generative models or c…
Adversarial PurificationAdversarial Purification by Consistency-aware Latent Space Optimization on Data Manifolds
Deep neural networks (DNNs) are vulnerable to adversarial samples crafted by adding imperceptible perturbations to clean data, potentially leading to incorrect and dangerous predictions. Adversarial purification has been…
Adversarial PurificationInstant Adversarial Purification with Adversarial Consistency Distillation
Neural networks, despite their remarkable performance in widespread applications, including image classification, are also known to be vulnerable to subtle adversarial noise. Although some diffusion-based purification me…
Adversarial Purificationimage-classificationImage ClassificationBreaking the Adversarial Robustness-Performance Trade-off in Text Classification via Manifold Purification
A persistent challenge in text classification (TC) is that enhancing model robustness against adversarial attacks typically degrades performance on clean data. We argue that this challenge can be resolved by modeling the…
Adversarial RobustnessText ClassificationPuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks
Black-box query-based attacks constitute significant threats to Machine Learning as a Service (MLaaS) systems since they can generate adversarial examples without accessing the target model's architecture and parameters.…
Adversarial Purification