Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Online Adversarial Purification based on Self-Supervision   Deep neural networks are known to be vulnerable to adversarial examples,
where a perturbation in the input space leads to an amplified shift in the
latent network representation. In this paper, we combine canonical supervised
learning with self-supervised representation learning, and present
Self-supervised Online Adversarial Purification (SOAP), a novel defense
strategy that uses a self-supervised loss to purify adversarial examples at
test-time. Our approach leverages the label-independent nature of
self-supervised signals and counters the adversarial perturbation with respect
to the self-supervised tasks. SOAP yields competitive robust accuracy against
state-of-the-art adversarial training and purification methods, with
considerably less training complexity. In addition, our approach is robust even
when adversaries are given knowledge of the purification defense strategy. To
the best of our knowledge, our paper is the first that generalizes the idea of
using self-supervised signals to perform online test-time purification.

29
The categories of this paper are: funct-an
10
The categories of this paper are: q-bio
11
The categories of this paper are: hep-lat
36
The categories of this paper are: cmp-lg
23
The categories of this paper are: solv-int
4
The categories of this paper are: cond-mat
21
The categories of this paper are: adap-org
14
The categories of this paper are: math-ph
28
The categories of this paper are: alg-geom
32
The categories of this paper are: atom-ph
5
The categories of this paper are: gr-qc
27
The categories of this paper are: comp-gas
0
The categories of this paper are: hep-ph
7
The categories of this paper are: hep-th
15
The categories of this paper are: nucl-ex
3
The categories of this paper are: physics