• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Yin, Jia-Li (Yin, Jia-Li.) [1] (Scholars:印佳丽) | Chen, Bin (Chen, Bin.) [2] | Zhu, Wanqing (Zhu, Wanqing.) [3] | Chen, Bo-Hao (Chen, Bo-Hao.) [4] | Liu, Ximeng (Liu, Ximeng.) [5] (Scholars:刘西蒙)

Indexed by:

EI Scopus SCIE

Abstract:

In response to the threat of adversarial examples, adversarial training provides an attractive option for improving robustness by training models on online-augmented adversarial examples. However, most existing adversarial training methods focus on improving the model's robust accuracy by strengthening the adversarial examples but neglecting the increasing shift between natural data and adversarial examples, leading to a decrease in natural accuracy. To maintain the trade-off between natural and robust accuracy, we alleviate the shift from the perspective of feature adaption and propose a Feature Adaptive Adversarial Training (FAAT) optimizing the class-conditional feature adaption across natural data and adversarial examples. Specifically, we propose to incorporate a class-conditional discriminator to encourage the features to become (1) class-discriminative and (2) invariant to the change of adversarial attacks. The novel FAAT framework enables the trade-off between natural and robust accuracy by generating features with similar distribution across natural and adversarial data within the same class and achieves higher overall robustness benefiting from the class-discriminative feature characteristics. Experiments on various datasets demonstrate that FAAT produces more discriminative features and performs favorably against state-of-the-art methods.

Keyword:

Adaptation models Adversarial example adversarial training Data models feature adaption model robustness Robustness Training

Community:

  • [ 1 ] [Yin, Jia-Li]Fuzhou Univ, Fujian Prov Key Lab Informat Secur & Network Syst, Fuzhou 350108, Peoples R China
  • [ 2 ] [Chen, Bin]Fuzhou Univ, Fujian Prov Key Lab Informat Secur & Network Syst, Fuzhou 350108, Peoples R China
  • [ 3 ] [Zhu, Wanqing]Fuzhou Univ, Fujian Prov Key Lab Informat Secur & Network Syst, Fuzhou 350108, Peoples R China
  • [ 4 ] [Liu, Ximeng]Fuzhou Univ, Fujian Prov Key Lab Informat Secur & Network Syst, Fuzhou 350108, Peoples R China
  • [ 5 ] [Yin, Jia-Li]Fuzhou Univ, Coll Comp Sci & Big Data, Fuzhou 350108, Peoples R China
  • [ 6 ] [Chen, Bin]Fuzhou Univ, Coll Comp Sci & Big Data, Fuzhou 350108, Peoples R China
  • [ 7 ] [Zhu, Wanqing]Fuzhou Univ, Coll Comp Sci & Big Data, Fuzhou 350108, Peoples R China
  • [ 8 ] [Liu, Ximeng]Fuzhou Univ, Coll Comp Sci & Big Data, Fuzhou 350108, Peoples R China
  • [ 9 ] [Chen, Bo-Hao]Yuan Ze Univ, Dept Comp Sci & Engn, Taoyuan 32003, Taiwan

Reprint 's Address:

  • 刘西蒙

    [Liu, Ximeng]Fuzhou Univ, Fujian Prov Key Lab Informat Secur & Network Syst, Fuzhou 350108, Peoples R China;;[Liu, Ximeng]Fuzhou Univ, Coll Comp Sci & Big Data, Fuzhou 350108, Peoples R China;;[Chen, Bo-Hao]Yuan Ze Univ, Dept Comp Sci & Engn, Taoyuan 32003, Taiwan

Show more details

Related Keywords:

Source :

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY

ISSN: 1556-6013

Year: 2023

Volume: 18

Page: 2119-2131

6 . 3

JCR@2023

6 . 3 0 0

JCR@2023

ESI Discipline: COMPUTER SCIENCE;

ESI HC Threshold:32

JCR Journal Grade:1

CAS Journal Grade:1

Cited Count:

WoS CC Cited Count: 0

SCOPUS Cited Count: 1

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 2

Online/Total:108/10006309
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1