February 11, 2021 Artificial intelligence Leave a comment

Denoised smoothing: Provably defending pretrained classifiers against adversarial examples

An animation comparing public image classification APIs to the proposed denoised smoothing framework applied to a public image classification API. In the first sequence, an image of an elephant is input into a public image classification API, represented by an arrow leading to a gray square labeled as such. An arrow from the square points to a correct prediction of elephant, enclosed in a green square, with the words “no robustness guaranteed” under it. In the second sequence, an arrow points from an image of an elephant to six noisy copies of the image. An arrow then points from the copies to a square labeled “Custom-trained Denoiser,” which outputs six clean versions of the images. An arrow points from the clean copies

<span id=

Leave a Reply Cancel reply

You must be logged in to post a comment.