Pub Date : 2024-03-18DOI: 10.1109/TETCI.2024.3372383
Yao Li;Tongyi Tang;Cho-Jui Hsieh;Thomas C. M. Lee
In this paper, we propose a new framework to detect adversarial examples motivated by the observations that random components can improve the smoothness of predictors and make it easier to simulate the output distribution of a deep neural network. With these observations, we propose a novel Bayesian adversarial example detector, short for BATer