Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: All You Need is RAW: Defending Against Adversarial Attacks with Camera
  Image Pipelines   Existing neural networks for computer vision tasks are vulnerable to
adversarial attacks: adding imperceptible perturbations to the input images can
fool these methods to make a false prediction on an image that was correctly
predicted without the perturbation. Various defense methods have proposed
image-to-image mapping methods, either including these perturbations in the
training process or removing them in a preprocessing denoising step. In doing
so, existing methods often ignore that the natural RGB images in today's
datasets are not captured but, in fact, recovered from RAW color filter array
captures that are subject to various degradations in the capture. In this work,
we exploit this RAW data distribution as an empirical prior for adversarial
defense. Specifically, we proposed a model-agnostic adversarial defensive
method, which maps the input RGB images to Bayer RAW space and back to output
RGB using a learned camera image signal processing (ISP) pipeline to eliminate
potential adversarial patterns. The proposed method acts as an off-the-shelf
preprocessing module and, unlike model-specific adversarial training methods,
does not require adversarial images to train. As a result, the method
generalizes to unseen tasks without additional retraining. Experiments on
large-scale datasets (e.g., ImageNet, COCO) for different vision tasks (e.g.,
classification, semantic segmentation, object detection) validate that the
method significantly outperforms existing methods across task domains.

22
The categories of this paper are: chao-dyn
7
The categories of this paper are: hep-th
11
The categories of this paper are: hep-lat
4
The categories of this paper are: cond-mat
28
The categories of this paper are: alg-geom
9
The categories of this paper are: nlin
23
The categories of this paper are: solv-int
29
The categories of this paper are: funct-an
0
The categories of this paper are: hep-ph
18
The categories of this paper are: econ
14
The categories of this paper are: math-ph
3
The categories of this paper are: physics
6
The categories of this paper are: astro-ph
13
The categories of this paper are: quant-ph
17
The categories of this paper are: q-fin
37
The categories of this paper are: supr-con