PuVAE: A Variational Autoencoder to Purify Adversarial Examples

IEEE Access

Jaewoo Park¹  Nam Ik Cho¹  Sungroh Yoon²  Uiwon Hwang²  Hyemi Jang² 

[1] Department of Electrical and Computer Engineering, INMC, Seoul National University, Seoul, South Korea;Electrical and Computer Engineering, Seoul National University, Seoul, South Korea;

关键词: Adversarial attack;    variational autoencoder;    deep learning;   

DOI  :  10.1109/ACCESS.2019.2939352

来源: DOAJ

【 摘 要 】

Deep neural networks are widely used and exhibit excellent performance in many areas. However, they are vulnerable to adversarial attacks that compromise networks at inference time by applying elaborately designed perturbations to input data. Although several defense methods have been proposed to address specific attacks, other types of attacks can circumvent these defense mechanisms. Therefore, we propose Purifying Variational AutoEncoder (PuVAE), a method to purify adversarial examples. The proposed method eliminates an adversarial perturbation by projecting an adversarial example on the manifold of each class and determining the closest projection as a purified sample. We experimentally illustrate the robustness of PuVAE against various attack methods without any prior knowledge about the attacks. In our experiments, the proposed method exhibits performances that are competitive with state-of-the-art defense methods, and the inference time is approximately 130 times faster than that of Defense-GAN which is a state-of-the art purifier method.

【 授权许可】

Unknown