AdvGAN++: Harnessing Latent Layers for Adversary Generation
Abstract
Adversarial examples are fabricated examples, indistinguishable from the original image that mislead neural networks and drastically lower their performance. Recently proposed AdvGAN, a GAN based approach, takes input image as a prior for generating adversaries to target a model. In this work, we show how latent features can serve as better priors than input images for adversary generation by proposing AdvGAN++, a version of AdvGAN that achieves higher attack rates than AdvGAN and at the same time generates perceptually realistic images on MNIST and CIFAR-10 datasets.
Cite
Text
Jandial et al. "AdvGAN++: Harnessing Latent Layers for Adversary Generation." IEEE/CVF International Conference on Computer Vision Workshops, 2019. doi:10.1109/ICCVW.2019.00257Markdown
[Jandial et al. "AdvGAN++: Harnessing Latent Layers for Adversary Generation." IEEE/CVF International Conference on Computer Vision Workshops, 2019.](https://mlanthology.org/iccvw/2019/jandial2019iccvw-advgan/) doi:10.1109/ICCVW.2019.00257BibTeX
@inproceedings{jandial2019iccvw-advgan,
title = {{AdvGAN++: Harnessing Latent Layers for Adversary Generation}},
author = {Jandial, Surgan and Mangla, Puneet and Varshney, Sakshi and Balasubramanian, Vineeth},
booktitle = {IEEE/CVF International Conference on Computer Vision Workshops},
year = {2019},
pages = {2045-2048},
doi = {10.1109/ICCVW.2019.00257},
url = {https://mlanthology.org/iccvw/2019/jandial2019iccvw-advgan/}
}