Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: On Detecting Adversarial Perturbations   Machine learning and deep learning in particular has advanced tremendously on
perceptual tasks in recent years. However, it remains vulnerable against
adversarial perturbations of the input that have been crafted specifically to
fool the system while being quasi-imperceptible to a human. In this work, we
propose to augment deep neural networks with a small "detector" subnetwork
which is trained on the binary classification task of distinguishing genuine
data from data containing adversarial perturbations. Our method is orthogonal
to prior work on addressing adversarial perturbations, which has mostly focused
on making the classification network itself more robust. We show empirically
that adversarial perturbations can be detected surprisingly well even though
they are quasi-imperceptible to humans. Moreover, while the detectors have been
trained to detect only a specific adversary, they generalize to similar and
weaker adversaries. In addition, we propose an adversarial attack that fools
both the classifier and the detector and a novel training procedure for the
detector that counteracts this attack.

12
The categories of this paper are: nucl-th
36
The categories of this paper are: cmp-lg
29
The categories of this paper are: funct-an
3
The categories of this paper are: physics
10
The categories of this paper are: q-bio
13
The categories of this paper are: quant-ph
14
The categories of this paper are: math-ph
5
The categories of this paper are: gr-qc
35
The categories of this paper are: mtrl-th
31
The categories of this paper are: ao-sci
19
The categories of this paper are: eess
34
The categories of this paper are: chem-ph
8
The categories of this paper are: hep-ex
9
The categories of this paper are: nlin
17
The categories of this paper are: q-fin
24
The categories of this paper are: dg-ga