Abstract
To better combat the impact of adversarial samples on deep neural networks, a model-agnostic stochastic input transformation (SIT) preprocessing technique is proposed in this article. The inputs are transformed into a new domain to minimize the impact of the adversarial perturbations.
Original language | English |
---|---|
Pages (from-to) | 63-72 |
Number of pages | 10 |
Journal | IEEE Design and Test |
Volume | 39 |
Issue number | 3 |
Early online date | 04 May 2021 |
DOIs | |
Publication status | Published - 01 Jun 2022 |
Externally published | Yes |
Keywords
- Adversarial Attacks
- Convolutional Neural Networks
- Machine Learning
- Security