[paper]Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks

本文提出了一个防御算法,在不改变深度神经网络的结构并且在尽可能小的影响模型准确率的前提下能够有效地抵御对抗样本的攻击。 We use the knowledge extracted during distillation to reduce the amplitude of network gradients exploited by adversaries to craft adversaria
相关文章
相关标签/搜索