Towards Better Accuracy and Robustness with Localized Adversarial Training

Authors

  • Eitan Rothberg Ohio State University
  • Tingting Chen California State Polytechnic University Pomona
  • Hao Ji California State Polytechnic University Pomona

DOI:

https://doi.org/10.1609/aaai.v33i01.330110017

Abstract

As technology and society grow increasingly dependent on computer vision, it becomes important to make sure that these technologies are secure. However, even today’s stateof-the-art classifiers are easily fooled by carefully manipulated images. The only solutions that have increased robustness against these manipulated images have come at the expense of accuracy on natural inputs. In this work, we propose a new training technique, localized adversarial training, that results in more accurate classification of both both natural and adversarial images by as much as 6.5% and 99.7%, respectively.

Downloads

Published

2019-07-17

How to Cite

Rothberg, E., Chen, T., & Ji, H. (2019). Towards Better Accuracy and Robustness with Localized Adversarial Training. Proceedings of the AAAI Conference on Artificial Intelligence, 33(01), 10017-10018. https://doi.org/10.1609/aaai.v33i01.330110017

Issue

Section

Student Abstract Track