Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarially Robust One-class Novelty Detection   One-class novelty detectors are trained with examples of a particular class
and are tasked with identifying whether a query example belongs to the same
known class. Most recent advances adopt a deep auto-encoder style architecture
to compute novelty scores for detecting novel class data. Deep networks have
shown to be vulnerable to adversarial attacks, yet little focus is devoted to
studying the adversarial robustness of deep novelty detectors. In this paper,
we first show that existing novelty detectors are susceptible to adversarial
examples. We further demonstrate that commonly-used defense approaches for
classification tasks have limited effectiveness in one-class novelty detection.
Hence, we need a defense specifically designed for novelty detection. To this
end, we propose a defense strategy that manipulates the latent space of novelty
detectors to improve the robustness against adversarial examples. The proposed
method, referred to as Principal Latent Space (PLS), learns the
incrementally-trained cascade principal components in the latent space to
robustify novelty detectors. PLS can purify latent space against adversarial
examples and constrain latent space to exclusively model the known class
distribution. We conduct extensive experiments on multiple attacks, datasets
and novelty detectors, showing that PLS consistently enhances the adversarial
robustness of novelty detection models.

27
The categories of this paper are: comp-gas
2
The categories of this paper are: math
10
The categories of this paper are: q-bio
33
The categories of this paper are: plasm-ph
30
The categories of this paper are: q-alg
32
The categories of this paper are: atom-ph
24
The categories of this paper are: dg-ga
13
The categories of this paper are: quant-ph
16
The categories of this paper are: stat
29
The categories of this paper are: funct-an
23
The categories of this paper are: solv-int
31
The categories of this paper are: ao-sci
3
The categories of this paper are: physics
9
The categories of this paper are: nlin
6
The categories of this paper are: astro-ph
11
The categories of this paper are: hep-lat