Defending DNN Adversarial Attacks with Pruning and Logits Augmentation

Siyue Wang, Xiao Wang, Shaokai Ye, Pu Zhao, Xue Lin
2018 2018 IEEE Global Conference on Signal and Information Processing (GlobalSIP)  
Deep neural networks (DNNs) have been shown to be powerful models and perform extremely well on many complicated artificial intelligent tasks. However, recent research found that these powerful models are vulnerable to adversarial attacks, i.e., intentionally added imperceptible perturbations to DNN inputs can easily mislead the DNNs with extremely high confidence. In this work, we enhance the robustness of DNNs under adversarial attacks by using pruning method and logits augmentation,
more » ... mentation, therefore, we achieve both higher defense against adversarial examples and more compressed DNN models. We have observed defense against adversarial attacks under the white box attack assumption. Our defense mechanisms work even better under the black box attack assumption.
doi:10.1109/globalsip.2018.8646578 dblp:conf/globalsip/WangWYZL18 fatcat:2eaoqm3fojginj6vie6im4kemq