jiaxiaojunQAQ / Comdefend

The code for ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples (CVPR2019)
112 stars 25 forks source link

About the Gaussian noise #15

Open sgmath12 opened 4 years ago

sgmath12 commented 4 years ago

In your paper, I have the following questions.

If these shades of gray information are binarized, the main structure information of original image is completely lost. In order to deal with this problem, we propose to use the noise attack

In this part, why are you assuming gray information are binarized ? After output pass the sigmoid, it conatain the value between 0~1, not 0 and 1 (binary).

The information encoded with 0 and 1 is easier to resist the noise attack.

In this part, why the information (output of ComCNN) encoded with 0 and 1 is easier to resit the noise attack ?

If anyone can give further explanation about this, it will really helpful for me.

Thanks.