relation
Browse files- index.html +7 -0
index.html
CHANGED
@@ -220,6 +220,13 @@
|
|
220 |
sample as a graph, whose nodes are embeddings extracted by DNN and edges are built according to distances between the input node
|
221 |
and reference nodes, and train a graph neural network to detect AEs.
|
222 |
</p>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
223 |
</div>
|
224 |
</div>
|
225 |
</div>
|
|
|
220 |
sample as a graph, whose nodes are embeddings extracted by DNN and edges are built according to distances between the input node
|
221 |
and reference nodes, and train a graph neural network to detect AEs.
|
222 |
</p>
|
223 |
+
|
224 |
+
<p>
|
225 |
+
In this work, We explore the relationship between inputs and their test-time augmented neighbours. As shown in Figure. 1,
|
226 |
+
clean samples exhibit a stronger correlation with their neighbors in terms of label consistency and representation
|
227 |
+
similarity. In contrast, AEs are distinctly separated from their neighbors. According to this observation, we propose <strong>BEYOND</strong>
|
228 |
+
to detection adversarial examples.
|
229 |
+
</p>
|
230 |
</div>
|
231 |
</div>
|
232 |
</div>
|