Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: REGroup: Rank-aggregating Ensemble of Generative Classifiers for Robust
  Predictions   Deep Neural Networks (DNNs) are often criticized for being susceptible to
adversarial attacks. Most successful defense strategies adopt adversarial
training or random input transformations that typically require retraining or
fine-tuning the model to achieve reasonable performance. In this work, our
investigations of intermediate representations of a pre-trained DNN lead to an
interesting discovery pointing to intrinsic robustness to adversarial attacks.
We find that we can learn a generative classifier by statistically
characterizing the neural response of an intermediate layer to clean training
samples. The predictions of multiple such intermediate-layer based classifiers,
when aggregated, show unexpected robustness to adversarial attacks.
Specifically, we devise an ensemble of these generative classifiers that
rank-aggregates their predictions via a Borda count-based consensus. Our
proposed approach uses a subset of the clean training data and a pre-trained
model, and yet is agnostic to network architectures or the adversarial attack
generation method. We show extensive experiments to establish that our defense
strategy achieves state-of-the-art performance on the ImageNet validation set.

19
The categories of this paper are: eess
30
The categories of this paper are: q-alg
36
The categories of this paper are: cmp-lg
32
The categories of this paper are: atom-ph
3
The categories of this paper are: physics
17
The categories of this paper are: q-fin
31
The categories of this paper are: ao-sci
33
The categories of this paper are: plasm-ph
6
The categories of this paper are: astro-ph
7
The categories of this paper are: hep-th
29
The categories of this paper are: funct-an
14
The categories of this paper are: math-ph
28
The categories of this paper are: alg-geom
21
The categories of this paper are: adap-org
8
The categories of this paper are: hep-ex
37
The categories of this paper are: supr-con