Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: When Should You Defend Your Classifier -- A Game-theoretical Analysis of
  Countermeasures against Adversarial Examples   Adversarial machine learning, i.e., increasing the robustness of machine
learning algorithms against so-called adversarial examples, is now an
established field. Yet, newly proposed methods are evaluated and compared under
unrealistic scenarios where costs for adversary and defender are not considered
and either all samples or no samples are adversarially perturbed. We scrutinize
these assumptions and propose the advanced adversarial classification game,
which incorporates all relevant parameters of an adversary and a defender.
Especially, we take into account economic factors on both sides and the fact
that all so far proposed countermeasures against adversarial examples reduce
accuracy on benign samples. Analyzing the scenario in detail, where both
players have two pure strategies, we identify all best responses and conclude
that in practical settings, the most influential factor might be the maximum
amount of adversarial examples.

22
The categories of this paper are: chao-dyn
30
The categories of this paper are: q-alg
26
The categories of this paper are: bayes-an
25
The categories of this paper are: patt-sol
0
The categories of this paper are: hep-ph
9
The categories of this paper are: nlin
23
The categories of this paper are: solv-int
36
The categories of this paper are: cmp-lg
13
The categories of this paper are: quant-ph
10
The categories of this paper are: q-bio
37
The categories of this paper are: supr-con
31
The categories of this paper are: ao-sci
24
The categories of this paper are: dg-ga
35
The categories of this paper are: mtrl-th
20
The categories of this paper are: acc-phys
14
The categories of this paper are: math-ph