Towards Practical Certifiable Patch Defense with Vision Transformer

Patch attacks, one of the most threatening forms of physical attack in adversarial examples, can lead networks to induce misclassification by modifying pixels arbitrarily in a continuous region. Certifiable patch defense can guarantee robustness that the classifier is not affected by patch attacks....

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	arXiv.org 2022-03
Hauptverfasser:	Chen, Zhaoyu, Li, Bo, Xu, Jianghe, Wu, Shuang, Ding, Shouhong, Zhang, Wenqiang
Format:	Artikel
Sprache:	eng
Schlagworte:	Accuracy Classifiers
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!