Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Two Souls in an Adversarial Image: Towards Universal Adversarial Example
  Detection using Multi-view Inconsistency   In the evasion attacks against deep neural networks (DNN), the attacker
generates adversarial instances that are visually indistinguishable from benign
samples and sends them to the target DNN to trigger misclassifications. In this
paper, we propose a novel multi-view adversarial image detector, namely Argos,
based on a novel observation. That is, there exist two "souls" in an
adversarial instance, i.e., the visually unchanged content, which corresponds
to the true label, and the added invisible perturbation, which corresponds to
the misclassified label. Such inconsistencies could be further amplified
through an autoregressive generative approach that generates images with seed
pixels selected from the original image, a selected label, and pixel
distributions learned from the training data. The generated images (i.e., the
"views") will deviate significantly from the original one if the label is
adversarial, demonstrating inconsistencies that Argos expects to detect. To
this end, Argos first amplifies the discrepancies between the visual content of
an image and its misclassified label induced by the attack using a set of
regeneration mechanisms and then identifies an image as adversarial if the
reproduced views deviate to a preset degree. Our experimental results show that
Argos significantly outperforms two representative adversarial detectors in
both detection accuracy and robustness against six well-known adversarial
attacks. Code is available at:
https://github.com/sohaib730/Argos-Adversarial_Detection

2
The categories of this paper are: math
32
The categories of this paper are: atom-ph
13
The categories of this paper are: quant-ph
8
The categories of this paper are: hep-ex
33
The categories of this paper are: plasm-ph
14
The categories of this paper are: math-ph
26
The categories of this paper are: bayes-an
4
The categories of this paper are: cond-mat
24
The categories of this paper are: dg-ga
30
The categories of this paper are: q-alg
17
The categories of this paper are: q-fin
22
The categories of this paper are: chao-dyn
18
The categories of this paper are: econ
23
The categories of this paper are: solv-int
15
The categories of this paper are: nucl-ex
3
The categories of this paper are: physics