Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarial Robustness with Non-uniform Perturbations   Robustness of machine learning models is critical for security related
applications, where real-world adversaries are uniquely focused on evading
neural network based detectors. Prior work mainly focus on crafting adversarial
examples (AEs) with small uniform norm-bounded perturbations across features to
maintain the requirement of imperceptibility. However, uniform perturbations do
not result in realistic AEs in domains such as malware, finance, and social
networks. For these types of applications, features typically have some
semantically meaningful dependencies. The key idea of our proposed approach is
to enable non-uniform perturbations that can adequately represent these feature
dependencies during adversarial training. We propose using characteristics of
the empirical data distribution, both on correlations between the features and
the importance of the features themselves. Using experimental datasets for
malware classification, credit risk prediction, and spam detection, we show
that our approach is more robust to real-world attacks. Finally, we present
robustness certification utilizing non-uniform perturbation bounds, and show
that non-uniform bounds achieve better certification.

18
The categories of this paper are: econ
25
The categories of this paper are: patt-sol
11
The categories of this paper are: hep-lat
22
The categories of this paper are: chao-dyn
36
The categories of this paper are: cmp-lg
0
The categories of this paper are: hep-ph
3
The categories of this paper are: physics
30
The categories of this paper are: q-alg
35
The categories of this paper are: mtrl-th
13
The categories of this paper are: quant-ph
24
The categories of this paper are: dg-ga
34
The categories of this paper are: chem-ph
23
The categories of this paper are: solv-int
5
The categories of this paper are: gr-qc
28
The categories of this paper are: alg-geom
8
The categories of this paper are: hep-ex