Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Where Classification Fails, Interpretation Rises   An intriguing property of deep neural networks is their inherent
vulnerability to adversarial inputs, which significantly hinders their
application in security-critical domains. Most existing detection methods
attempt to use carefully engineered patterns to distinguish adversarial inputs
from their genuine counterparts, which however can often be circumvented by
adaptive adversaries. In this work, we take a completely different route by
leveraging the definition of adversarial inputs: while deceiving for deep
neural networks, they are barely discernible for human visions. Building upon
recent advances in interpretable models, we construct a new detection framework
that contrasts an input's interpretation against its classification. We
validate the efficacy of this framework through extensive experiments using
benchmark datasets and attacks. We believe that this work opens a new direction
for designing adversarial input detection methods.

15
The categories of this paper are: nucl-ex
26
The categories of this paper are: bayes-an
32
The categories of this paper are: atom-ph
33
The categories of this paper are: plasm-ph
37
The categories of this paper are: supr-con
23
The categories of this paper are: solv-int
0
The categories of this paper are: hep-ph
11
The categories of this paper are: hep-lat
17
The categories of this paper are: q-fin
21
The categories of this paper are: adap-org
24
The categories of this paper are: dg-ga
8
The categories of this paper are: hep-ex
34
The categories of this paper are: chem-ph
27
The categories of this paper are: comp-gas
25
The categories of this paper are: patt-sol
6
The categories of this paper are: astro-ph