Improving Adversarial Training using Vulnerability-Aware Perturbation Budget

arXiv:2403.04070v1 Announce Type: new
Abstract: Adversarial Training (AT) effectively improves the robustness of Deep Neural Networks (DNNs) to adversarial attacks. Generally, AT involves training DNN models with adversarial examples obtained within a pre-defined, fixed perturbation bound. Notably, individual natural examples from which these adversarial examples are crafted exhibit varying degrees of intrinsic vulnerabilities, and as such, crafting adversarial examples with fixed perturbation radius for all instances may not sufficiently unleash the potency of AT. Motivated by this observation, we propose …

abstract adversarial adversarial attacks adversarial examples adversarial training arxiv attacks budget cs.ai cs.cr cs.cv cs.lg dnn examples intrinsic natural networks neural networks robustness training type vulnerabilities vulnerability