ATTACK-LESS ADVERSARIAL TRAINING FOR ROBUST ADVERSARIAL DEFENSE

摘要

Disclosed herein is attack-less adversarial training for robust adversarial defense. The attack-less adversarial training for robust adversarial defense includes the steps of: (a) generating individual intervals (c_i) by setting the range of color (C) and then discretizing the range of color (C) by a predetermined number (k); (b) generating one batch from an original image (X) and training a learning model with the batch; (c) predicting individual interval indices (ŷ_i^alat) from respective pixels (x_i) of the original image (X) by using an activation function; (d) generating a new image (X^alat) through mapping and randomization; and (e) training a convolutional neural network with the image (X^alat) generated in step (d) and outputting a predicted label (Ŷ).