dc.creatorKloster, Matias Alejandro
dc.creatorCúñale, Ariel Hernán
dc.creatorMato, Germán
dc.date2020-10
dc.date2020
dc.date2021-04-07T13:16:28Z
dc.date.accessioned2023-07-15T01:07:42Z
dc.date.available2023-07-15T01:07:42Z
dc.identifierhttp://sedici.unlp.edu.ar/handle/10915/116415
dc.identifierhttp://49jaiio.sadio.org.ar/pdfs/agranda/AGRANDA-04.pdf
dc.identifierissn:2683-8966
dc.identifier.urihttps://repositorioslatinoamericanos.uchile.cl/handle/2250/7457066
dc.descriptionWe propose a new method for detecting adversarial examples based on a stochastic approach. An example is presented to the network several times and classified as adversarial if the fraction of times the output label is different from the label generated by the deterministic network is above some threshold value. We analyze the performance of the method for three attack methods (DeepFool, Fast Gradient Sign Method and norm 2 Carlini Wagner) and two datasets (MNIST and CIFAR-10). We find that our approach works best for stronger attacks such as DeepFool and CW2, and could be used as part of a scheme where several methods are applied simultaneously in order to estimate if a given input is adversarial or not.
dc.descriptionSociedad Argentina de Informática
dc.formatapplication/pdf
dc.format25-38
dc.languageen
dc.rightshttp://creativecommons.org/licenses/by-nc-sa/3.0/
dc.rightsCreative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported (CC BY-NC-SA 3.0)
dc.subjectCiencias Informáticas
dc.subjectAdversarial examples
dc.subjectMethod for detecting
dc.titleNoise Based Approach for the Detection of Adversarial Examples
dc.typeObjeto de conferencia
dc.typeObjeto de conferencia


Este ítem pertenece a la siguiente institución