liu.seSök publikationer i DiVA
Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • oxford
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
A Self-supervised Approach for Adversarial Robustness
Inception Institute of Artificial Intelligence, UAE; Data61-CSIRO, Australia; Australian National University, Australia.
nception Institute of Artificial Intelligence, UAE.
Inception Institute of Artificial Intelligence, UAE.
Linköpings universitet, Institutionen för systemteknik, Datorseende. Linköpings universitet, Tekniska fakulteten. Inception Institute of Artificial Intelligence, UAE.
Visa övriga samt affilieringar
2020 (Engelska)Ingår i: 2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), IEEE, 2020, s. 259-268Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]

Adversarial examples can cause catastrophic mistakes in Deep Neural Network (DNNs) based vision systems e.g., for classification, segmentation and object detection. The vulnerability of DNNs against such attacks can prove a major roadblock towards their real-world deployment. Transferability of adversarial examples demand generalizable defenses that can provide cross-task protection. Adversarial training that enhances robustness by modifying target model’s parameters lacks such generalizability. On the other hand, different input processing based defenses fall short in the face of continuously evolving attacks. In this paper, we take the first step to combine the benefits of both approaches and propose a self-supervised adversarial training mechanism in the input space. By design, our defense is a generalizable approach and provides significant robustness against the unseen adversarial attacks (\eg by reducing the success rate of translation-invariant ensemble attack from 82.6% to 31.9% in comparison to previous state-of-the-art). It can be deployed as a plug-and-play solution to protect a variety of vision systems, as we demonstrate for the case of classification, segmentation and detection.

Ort, förlag, år, upplaga, sidor
IEEE, 2020. s. 259-268
Serie
Computer Society Conference on Computer Vision and Pattern Recognition, ISSN 2575-7075
Nyckelord [en]
Perturbation methods;Task analysis;Distortion;Training;Robustness;Feature extraction;Neural networks
Nationell ämneskategori
Datorgrafik och datorseende
Identifikatorer
URN: urn:nbn:se:liu:diva-168130DOI: 10.1109/CVPR42600.2020.00034ISI: 000620679500027ISBN: 978-1-7281-7168-5 (digital)OAI: oai:DiVA.org:liu-168130DiVA, id: diva2:1458576
Konferens
Computer Vision and Pattern Recognition (CVPR), Seattle, WA, USA, 13-19 June 2020
Tillgänglig från: 2020-08-17 Skapad: 2020-08-17 Senast uppdaterad: 2025-02-07

Open Access i DiVA

Fulltext saknas i DiVA

Övriga länkar

Förlagets fulltext

Person

Khan, Fahad Shahbaz

Sök vidare i DiVA

Av författaren/redaktören
Khan, Fahad Shahbaz
Av organisationen
DatorseendeTekniska fakulteten
Datorgrafik och datorseende

Sök vidare utanför DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetricpoäng

doi
isbn
urn-nbn
Totalt: 123 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • oxford
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf