ADVREPAIR:Provable Repair of Adversarial Attack

arXiv:2404.01642v1 Announce Type: cross
Abstract: Deep neural networks (DNNs) are increasingly deployed in safety-critical domains, but their vulnerability to adversarial attacks poses serious safety risks. Existing neuron-level methods using limited data lack efficacy in fixing adversaries due to the inherent complexity of adversarial attack mechanisms, while adversarial training, leveraging a large number of adversarial samples to enhance robustness, lacks provability. In this paper, we propose ADVREPAIR, a novel approach for provable repair of adversarial attacks using limited data. By utilizing …

adversarial adversarial attack adversarial attacks adversaries arxiv attack attacks complexity critical cs.cr cs.lg data domains large networks neural networks neuron repair risks safety safety-critical serious training vulnerability