Continual Adversarial Defense

arXiv:2312.09481v2 Announce Type: replace-cross
Abstract: In response to the rapidly evolving nature of adversarial attacks against visual classifiers on a monthly basis, numerous defenses have been proposed to generalize against as many known attacks as possible. However, designing a defense method that generalizes to all types of attacks is not realistic because the environment in which defense systems operate is dynamic and comprises various unique attacks that emerge as time goes on. The defense system must gather online few-shot defense …

abstract adversarial adversarial attacks arxiv attacks classifiers continual cs.cr cs.cv cs.lg defense designing environment however nature the environment type types visual