relation
Browse files- index.html +7 -0
index.html
CHANGED
|
@@ -220,6 +220,13 @@
|
|
| 220 |
sample as a graph, whose nodes are embeddings extracted by DNN and edges are built according to distances between the input node
|
| 221 |
and reference nodes, and train a graph neural network to detect AEs.
|
| 222 |
</p>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 223 |
</div>
|
| 224 |
</div>
|
| 225 |
</div>
|
|
|
|
| 220 |
sample as a graph, whose nodes are embeddings extracted by DNN and edges are built according to distances between the input node
|
| 221 |
and reference nodes, and train a graph neural network to detect AEs.
|
| 222 |
</p>
|
| 223 |
+
|
| 224 |
+
<p>
|
| 225 |
+
In this work, We explore the relationship between inputs and their test-time augmented neighbours. As shown in Figure. 1,
|
| 226 |
+
clean samples exhibit a stronger correlation with their neighbors in terms of label consistency and representation
|
| 227 |
+
similarity. In contrast, AEs are distinctly separated from their neighbors. According to this observation, we propose <strong>BEYOND</strong>
|
| 228 |
+
to detection adversarial examples.
|
| 229 |
+
</p>
|
| 230 |
</div>
|
| 231 |
</div>
|
| 232 |
</div>
|