Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries

The paper proposes an ensemble defense against adversarial attacks by creating models with diverse decision boundaries. It uses two methods—Split-and-Shuffle and Contrast-Significant-Features—to train a detector model that forces different models to make different classifications, making it harder for attackers to fool all of them simultaneously.

Open the full episode

More from AI Radio