Defending against adversarial attacks in deep neural networks

Abstract

We focus on defending against adversarial attacks in deep neural networks using signal analysis technology. The method employs a novel signal processing theory as a defense to adversarial perturbations. The method neither modifies the protected network nor requires knowledge of the process for generating adversarial examples. Extensive evaluation experiments demonstrate the efficiency and effectiveness of the proposed adversarial defending method.