Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Feature Denoising for Improving Adversarial Robustness   Adversarial attacks to image classification systems present challenges to
convolutional networks and opportunities for understanding them. This study
suggests that adversarial perturbations on images lead to noise in the features
constructed by these networks. Motivated by this observation, we develop new
network architectures that increase adversarial robustness by performing
feature denoising. Specifically, our networks contain blocks that denoise the
features using non-local means or other filters; the entire networks are
trained end-to-end. When combined with adversarial training, our feature
denoising networks substantially improve the state-of-the-art in adversarial
robustness in both white-box and black-box attack settings. On ImageNet, under
10-iteration PGD white-box attacks where prior art has 27.9% accuracy, our
method achieves 55.7%; even under extreme 2000-iteration PGD white-box attacks,
our method secures 42.6% accuracy. Our method was ranked first in Competition
on Adversarial Attacks and Defenses (CAAD) 2018 --- it achieved 50.6%
classification accuracy on a secret, ImageNet-like test dataset against 48
unknown attackers, surpassing the runner-up approach by ~10%. Code is available
at https://github.com/facebookresearch/ImageNet-Adversarial-Training.

25
The categories of this paper are: patt-sol
32
The categories of this paper are: atom-ph
8
The categories of this paper are: hep-ex
16
The categories of this paper are: stat
36
The categories of this paper are: cmp-lg
35
The categories of this paper are: mtrl-th
5
The categories of this paper are: gr-qc
19
The categories of this paper are: eess
17
The categories of this paper are: q-fin
30
The categories of this paper are: q-alg
26
The categories of this paper are: bayes-an
4
The categories of this paper are: cond-mat
33
The categories of this paper are: plasm-ph
10
The categories of this paper are: q-bio
23
The categories of this paper are: solv-int
34
The categories of this paper are: chem-ph