Closed oceank closed 4 years ago
Approach 1: add randomness (random noise) to AEs and then use them to train ensemble models
Approach 2: use the strongest type of AEs to build ensemble models for defense
The new defense strategies do not depend on adversaries. i.e., the new strategies do not have any assumption on the adversarial attacks used to generate the AEs.
Approach 1: add randomness (random noise) to AEs and then use them to train ensemble models
Approach 2: use the strongest type of AEs to build ensemble models for defense