These labels were automatically added by AI and may be inaccurate. For details, see About Literature Database.
Abstract
We provide recovery guarantees for compressible signals that have been
corrupted with noise and extend the framework introduced in
\cite{bafna2018thwarting} to defend neural networks against $\ell_0$-norm,
$\ell_2$-norm, and $\ell_{\infty}$-norm attacks. Our results are general as
they can be applied to most unitary transforms used in practice and hold for
$\ell_0$-norm, $\ell_2$-norm, and $\ell_\infty$-norm bounded noise. In the case
of $\ell_0$-norm noise, we prove recovery guarantees for Iterative Hard
Thresholding (IHT) and Basis Pursuit (BP). For $\ell_2$-norm bounded noise, we
provide recovery guarantees for BP and for the case of $\ell_\infty$-norm
bounded noise, we provide recovery guarantees for Dantzig Selector (DS). These
guarantees theoretically bolster the defense framework introduced in
\cite{bafna2018thwarting} for defending neural networks against adversarial
inputs. Finally, we experimentally demonstrate the effectiveness of this
defense framework against an array of $\ell_0$, $\ell_2$ and $\ell_\infty$ norm
attacks.