Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarial robustness via stochastic regularization of neural
  activation sensitivity   Recent works have shown that the input domain of any machine learning
classifier is bound to contain adversarial examples. Thus we can no longer hope
to immune classifiers against adversarial examples and instead can only aim to
achieve the following two defense goals: 1) making adversarial examples harder
to find, or 2) weakening their adversarial nature by pushing them further away
from correctly classified data points. Most if not all the previously suggested
defense mechanisms attend to just one of those two goals, and as such, could be
bypassed by adaptive attacks that take the defense mechanism into
consideration. In this work we suggest a novel defense mechanism that
simultaneously addresses both defense goals: We flatten the gradients of the
loss surface, making adversarial examples harder to find, using a novel
stochastic regularization term that explicitly decreases the sensitivity of
individual neurons to small input perturbations. In addition, we push the
decision boundary away from correctly classified inputs by leveraging Jacobian
regularization. We present a solid theoretical basis and an empirical testing
of our suggested approach, demonstrate its superiority over previously
suggested defense mechanisms, and show that it is effective against a wide
range of adaptive attacks.

26
The categories of this paper are: bayes-an
17
The categories of this paper are: q-fin
24
The categories of this paper are: dg-ga
28
The categories of this paper are: alg-geom
12
The categories of this paper are: nucl-th
32
The categories of this paper are: atom-ph
9
The categories of this paper are: nlin
7
The categories of this paper are: hep-th
6
The categories of this paper are: astro-ph
20
The categories of this paper are: acc-phys
18
The categories of this paper are: econ
10
The categories of this paper are: q-bio
25
The categories of this paper are: patt-sol
21
The categories of this paper are: adap-org
27
The categories of this paper are: comp-gas
19
The categories of this paper are: eess