Loading web-font TeX/Main/Regular
Deep Adversarial Defense Against Multilevel <span class="MathJax_Preview" style="">-\ell_{P}</span><script type="math/tex" id="MathJax-Element-1">-\ell_{P}</script> Attacks | IEEE Conference Publication | IEEE Xplore

Deep Adversarial Defense Against Multilevel -\ell_{P} Attacks


Abstract:

Deep learning models have shown considerable vulnerability to adversarial attacks, particularly as attacker strategies become more sophisticated. While traditional advers...Show More

Abstract:

Deep learning models have shown considerable vulnerability to adversarial attacks, particularly as attacker strategies become more sophisticated. While traditional adversarial training (AT) techniques offer some resilience, they often focus on defending against a single type of attack, e.g., the p_{\infty}-norm attack, which can fail for other types. This paper introduces a computationally efficient multilevel \ell_{p} defense, called the Efficient Robust Mode Connectivity (EMRC) method, which aims to enhance a deep learning model's resilience against multiple \ell_{p}-norm attacks. Similar to analytical continuation approaches used in continuous optimization, the method blends two p-specific adversarially optimal models, the \ell_{1} - and \ell_{\infty}-norm AT solutions, to provide good adversarial robustness for a range of p. We present experiments demonstrating that our approach performs better on various attacks as compared to \text{AT}-P_{\infty}, E-AT, and MSD, for datasets/architectures including: CIFAR-10, CIFAR-100 / PreResNet110, WideResNet, ViT-Base.
Date of Conference: 22-25 September 2024
Date Added to IEEE Xplore: 04 November 2024
ISBN Information:

ISSN Information:

Conference Location: London, United Kingdom

Contact IEEE to Subscribe

References

References is not available for this document.