Abstract:Deep neural networks are proven to be vulnerable to fine-designed adversarial examples, and adversarial defense algorithms draw more and more attention nowadays. Pre-processing based defense is a major strategy, as well as learning robust feature representation has been proven an effective way to boost generalization. However, existing defense works lack considering different depth-level visual features in the training process. In this paper, we first highlight two novel properties of robust features from the feature distribution perspective: 1) \textbf{Diversity}. The robust feature of intra-class samples can maintain appropriate diversity; 2) \textbf{Discriminability}. The robust feature of inter-class samples should ensure adequate separation. We find that state-of-the-art defense methods aim to address both of these mentioned issues well. It motivates us to increase intra-class variance and decrease inter-class discrepancy simultaneously in adversarial training. Specifically, we propose a simple but effective defense based on decoupled visual representation masking. The designed Decoupled Visual Feature Masking (DFM) block can adaptively disentangle visual discriminative features and non-visual features with diverse mask strategies, while the suitable discarding information can disrupt adversarial noise to improve robustness. Our work provides a generic and easy-to-plugin block unit for any former adversarial training algorithm to achieve better protection integrally. Extensive experimental results prove the proposed method can achieve superior performance compared with state-of-the-art defense approaches. The code is publicly available at \href{<a class="link-external link-https" href="https://github.com/chenboluo/Adversarial-defense" rel="external noopener nofollow">this https URL</a>}{<a class="link-external link-https" href="https://github.com/chenboluo/Adversarial-defense" rel="external noopener nofollow">this https URL</a>}.

DeepRobust: A PyTorch Library for Adversarial Attacks and Defenses

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

DeepRobust: a Platform for Adversarial Attacks and Defenses

Adversarial Robustness Toolbox v1.0.0

Deep Defense: Training DNNs with Improved Adversarial Robustness

DeepDefense: Training Deep Neural Networks with Improved Robustness.

ROBY: Evaluating the adversarial robustness of a deep model by its decision boundaries

RobArch: Designing Robust Architectures against Adversarial Attacks

Towards Deep Learning Models Resistant to Adversarial Attacks

A Comprehensive Study of the Robustness for LiDAR-Based 3D Object Detectors Against Adversarial Attacks

Adversarially-Aware Robust Object Detector.

A Comprehensive Survey of Robust Deep Learning in Computer Vision

Opportunities and Challenges in Deep Learning Adversarial Robustness: A Survey

MultiRobustBench: Benchmarking Robustness Against Multiple Attacks

Adversarial Attacks on ML Defense Models Competition

Improving Adversarial Robustness via Decoupled Visual Representation Masking

Torchattacks: A PyTorch Repository for Adversarial Attacks

Adversarial robustness improvement for deep neural networks

A Comprehensive Evaluation Framework for Deep Model Robustness

$A^{3}D$: A Platform of Searching for Robust Neural Architectures and Efficient Adversarial Attacks