CONFERENCE PROCEEDINGS
Advanced Search
Home > Proceedings > Volume 11197 > Article
Paper
12 November 2019 Utilizing full neuronal states for adversarial robustness
Alex Gain, Hava T. Siegelmann
Author Affiliations +
Proceedings Volume 11197, SPIE Future Sensing Technologies; 1119712 (2019) https://doi.org/10.1117/12.2542804
Event: SPIE Future Sensing Technologies, 2019, Tokyo, Japan
Abstract
Small, imperceptible perturbations of the input data can lead to DNNs making egregious errors during inference, such as misclassifying an image of a dog as a cat with high probability. Thus, defending against adversarial examples for deep neural networks (DNNs) is of great interest to sensing technologies and the machine learning community to ensure the security of practical systems where DNNs are used. Whereas many approaches have been explored for defending against adversarial attacks, few have made use of the full state of the entire network, opting instead to only consider the output layer and gradient information. We develop several motivated techniques that make use of the full network state, improving adversarial robustness. We provide principled motivation of our techniques via analysis of attractor dynamics, shown to occur in the highly recurrent human brain, and validate our improvements via empirical results on standard datasets and white-box attacks.
© (2019) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Citation Download Citation
Alex Gain and Hava T. Siegelmann "Utilizing full neuronal states for adversarial robustness", Proc. SPIE 11197, SPIE Future Sensing Technologies, 1119712 (12 November 2019); https://doi.org/10.1117/12.2542804
ACCESS THE FULL ARTICLE
ORGANIZATIONAL
Sign in with credentials provided by your organization.
INSTITUTIONAL
Select your institution to access the SPIE Digital Library.
SELECT YOUR INSTITUTION
PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.
PERSONAL SIGN IN
No SPIE Account? Create one
PURCHASE THIS CONTENT
SUBSCRIBE TO DIGITAL LIBRARY
50 downloads per 1-year subscription
Members: $195
Non-members: $335 ADD TO CART
25 downloads per 1 - year subscription
Members: $145
Non-members: $250 ADD TO CART
PURCHASE SINGLE ARTICLE
Includes PDF, HTML & Video, when available
Members: $17.00
Non-members: $21.00 ADD TO CART
PROCEEDINGS
 3 PAGES
DOWNLOAD PAPER SAVE TO MY LIBRARY
GET CITATION
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Defense and security
Information security
Network security
Neural networks
Sensing systems
Stochastic processes
RELATED CONTENT
Subscribe to Digital Library
Receive Erratum Email Alert
Back to Top