Stanley Osher

Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization

2018 · arXiv (Cornell University)

We improve the robustness of Deep Neural Net (DNN) to adversarial attacks by using an interpolating function as the output activation. This data-dependent activation remarkably improves both the generalization and robustness of DNN. In the …