Adversarial Training on Purification (AToP) combines the strengths of adversarial training and adversarial purification to enhance robustness and generalization against unseen attacks.
AToP combines adversarial training and purification to enhance robustness and generalization.
Deep neural networks are vulnerable to adversarial noise, and pre-processing methods can enhance white-box robustness by utilizing full adversarial examples.
Full adversarial examples improve pre-processing defense robustness.
AToP combines adversarial training and purification to enhance robustness and generalization against unseen attacks.
The author proposes Adversarial Training on Purification (AToP) as a novel defense technique to enhance both robustness and generalization in deep neural networks.