Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Less is More: Feature Selection for Adversarial Robustness with
  Compressive Counter-Adversarial Attacks   A common observation regarding adversarial attacks is that they mostly give
rise to false activation at the penultimate layer to fool the classifier.
Assuming that these activation values correspond to certain features of the
input, the objective becomes choosing the features that are most useful for
classification. Hence, we propose a novel approach to identify the important
features by employing counter-adversarial attacks, which highlights the
consistency at the penultimate layer with respect to perturbations on input
samples. First, we empirically show that there exist a subset of features,
classification based in which bridge the gap between the clean and robust
accuracy. Second, we propose a simple yet efficient mechanism to identify those
features by searching the neighborhood of input sample. We then select features
by observing the consistency of the activation values at the penultimate layer.

26
The categories of this paper are: bayes-an
21
The categories of this paper are: adap-org
8
The categories of this paper are: hep-ex
37
The categories of this paper are: supr-con
7
The categories of this paper are: hep-th
12
The categories of this paper are: nucl-th
9
The categories of this paper are: nlin
28
The categories of this paper are: alg-geom
34
The categories of this paper are: chem-ph
32
The categories of this paper are: atom-ph
13
The categories of this paper are: quant-ph
25
The categories of this paper are: patt-sol
16
The categories of this paper are: stat
14
The categories of this paper are: math-ph
10
The categories of this paper are: q-bio
24
The categories of this paper are: dg-ga