Haoyu Wang1, Chunhua Wu1, Kangfeng Zheng1

  • 1School of Cyberspace Security, Beijing University of Posts and Telecommunications, China.

概括

这项研究引入了一种针对深度学习模型的对抗性攻击的新防御方法. 通过放大对抗性扰动,该方法使攻击变得可见,并使其无效.