Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarial Detection and Correction by Matching Prediction
  Distributions   We present a novel adversarial detection and correction method for machine
learning classifiers.The detector consists of an autoencoder trained with a
custom loss function based on the Kullback-Leibler divergence between the
classifier predictions on the original and reconstructed instances.The method
is unsupervised, easy to train and does not require any knowledge about the
underlying attack. The detector almost completely neutralises powerful attacks
like Carlini-Wagner or SLIDE on MNIST and Fashion-MNIST, and remains very
effective on CIFAR-10 when the attack is granted full access to the
classification model but not the defence. We show that our method is still able
to detect the adversarial examples in the case of a white-box attack where the
attacker has full knowledge of both the model and the defence and investigate
the robustness of the attack. The method is very flexible and can also be used
to detect common data corruptions and perturbations which negatively impact the
model performance. We illustrate this capability on the CIFAR-10-C dataset.

13
The categories of this paper are: quant-ph
8
The categories of this paper are: hep-ex
11
The categories of this paper are: hep-lat
19
The categories of this paper are: eess
6
The categories of this paper are: astro-ph
27
The categories of this paper are: comp-gas
14
The categories of this paper are: math-ph
0
The categories of this paper are: hep-ph
3
The categories of this paper are: physics
31
The categories of this paper are: ao-sci
34
The categories of this paper are: chem-ph
15
The categories of this paper are: nucl-ex
10
The categories of this paper are: q-bio
30
The categories of this paper are: q-alg
26
The categories of this paper are: bayes-an
17
The categories of this paper are: q-fin