Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarial Defense via Local Flatness Regularization   Adversarial defense is a popular and important research area. Due to its
intrinsic mechanism, one of the most straightforward and effective ways of
defending attacks is to analyze the property of loss surface in the input
space. In this paper, we define the local flatness of the loss surface as the
maximum value of the chosen norm of the gradient regarding to the input within
a neighborhood centered on the benign sample, and discuss the relationship
between the local flatness and adversarial vulnerability. Based on the
analysis, we propose a novel defense approach via regularizing the local
flatness, dubbed local flatness regularization (LFR). We also demonstrate the
effectiveness of the proposed method from other perspectives, such as human
visual mechanism, and analyze the relationship between LFR and other related
methods theoretically. Experiments are conducted to verify our theory and
demonstrate the superiority of the proposed method.

35
The categories of this paper are: mtrl-th
3
The categories of this paper are: physics
23
The categories of this paper are: solv-int
22
The categories of this paper are: chao-dyn
15
The categories of this paper are: nucl-ex
25
The categories of this paper are: patt-sol
21
The categories of this paper are: adap-org
2
The categories of this paper are: math
26
The categories of this paper are: bayes-an
31
The categories of this paper are: ao-sci
5
The categories of this paper are: gr-qc
12
The categories of this paper are: nucl-th
20
The categories of this paper are: acc-phys
27
The categories of this paper are: comp-gas
10
The categories of this paper are: q-bio
9
The categories of this paper are: nlin