Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Trust but Verify: An Information-Theoretic Explanation for the
  Adversarial Fragility of Machine Learning Systems, and a General Defense
  against Adversarial Attacks   Deep-learning based classification algorithms have been shown to be
susceptible to adversarial attacks: minor changes to the input of classifiers
can dramatically change their outputs, while being imperceptible to humans. In
this paper, we present a simple hypothesis about a feature compression property
of artificial intelligence (AI) classifiers and present theoretical arguments
to show that this hypothesis successfully accounts for the observed fragility
of AI classifiers to small adversarial perturbations. Drawing on ideas from
information and coding theory, we propose a general class of defenses for
detecting classifier errors caused by abnormally small input perturbations. We
further show theoretical guarantees for the performance of this detection
method. We present experimental results with (a) a voice recognition system,
and (b) a digit recognition system using the MNIST database, to demonstrate the
effectiveness of the proposed defense methods. The ideas in this paper are
motivated by a simple analogy between AI classifiers and the standard Shannon
model of a communication system.

10
The categories of this paper are: q-bio
2
The categories of this paper are: math
30
The categories of this paper are: q-alg
29
The categories of this paper are: funct-an
32
The categories of this paper are: atom-ph
34
The categories of this paper are: chem-ph
9
The categories of this paper are: nlin
22
The categories of this paper are: chao-dyn
17
The categories of this paper are: q-fin
12
The categories of this paper are: nucl-th
8
The categories of this paper are: hep-ex
15
The categories of this paper are: nucl-ex
33
The categories of this paper are: plasm-ph
26
The categories of this paper are: bayes-an
3
The categories of this paper are: physics
18
The categories of this paper are: econ