Alert button
Picture for Sihang Liang

Sihang Liang

Alert button

Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference

Add code
Bookmark button
Alert button
Sep 29, 2018
Ruying Bao, Sihang Liang, Qingcan Wang

Figure 1 for Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference
Figure 2 for Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference
Figure 3 for Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference
Figure 4 for Featurized Bidirectional GAN: Adversarial Defense via Adversarially Learned Semantic Inference

Deep neural networks have been demonstrated to be vulnerable to adversarial attacks, where small perturbations intentionally added to the original inputs can fool the classifier. In this paper, we propose a defense method, Featurized Bidirectional Generative Adversarial Networks (FBGAN), to extract the semantic features of the input and filter the non-semantic perturbation. FBGAN is pre-trained on the clean dataset in an unsupervised manner, adversarially learning a bidirectional mapping between the high-dimensional data space and the low-dimensional semantic space; also mutual information is applied to disentangle the semantically meaningful features. After the bidirectional mapping, the adversarial data can be reconstructed to denoised data, which could be fed into any pre-trained classifier. We empirically show the quality of reconstruction images and the effectiveness of defense.

Viaarxiv icon
Github IconAccess Paper or Ask Questions
Twitter IconFacebook IconLinkedin IconWhatsapp IconMessenger Icon