Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Attacking Binarized Neural Networks   Neural networks with low-precision weights and activations offer compelling
efficiency advantages over their full-precision equivalents. The two most
frequently discussed benefits of quantization are reduced memory consumption,
and a faster forward pass when implemented with efficient bitwise operations.
We propose a third benefit of very low-precision neural networks: improved
robustness against some adversarial attacks, and in the worst case, performance
that is on par with full-precision models. We focus on the very low-precision
case where weights and activations are both quantized to $\pm$1, and note that
stochastically quantizing weights in just one layer can sharply reduce the
impact of iterative attacks. We observe that non-scaled binary neural networks
exhibit a similar effect to the original defensive distillation procedure that
led to gradient masking, and a false notion of security. We address this by
conducting both black-box and white-box experiments with binary models that do
not artificially mask gradients.

3
The categories of this paper are: physics
36
The categories of this paper are: cmp-lg
18
The categories of this paper are: econ
26
The categories of this paper are: bayes-an
29
The categories of this paper are: funct-an
4
The categories of this paper are: cond-mat
21
The categories of this paper are: adap-org
33
The categories of this paper are: plasm-ph
27
The categories of this paper are: comp-gas
7
The categories of this paper are: hep-th
28
The categories of this paper are: alg-geom
12
The categories of this paper are: nucl-th
35
The categories of this paper are: mtrl-th
32
The categories of this paper are: atom-ph
25
The categories of this paper are: patt-sol
14
The categories of this paper are: math-ph