GanDef: A GAN Based Adversarial Training Defense for Neural Network Classifier - ICT Systems Security and Privacy Protection Access content directly
Conference Papers Year : 2019

GanDef: A GAN Based Adversarial Training Defense for Neural Network Classifier

Guanxiong Liu
  • Function : Author
  • PersonId : 1153493
Issa Khalil
  • Function : Author
  • PersonId : 1153494

Abstract

Machine learning models, especially neural network (NN) classifiers, are widely used in many applications including natural language processing, computer vision and cybersecurity. They provide high accuracy under the assumption of attack-free scenarios. However, this assumption has been defied by the introduction of adversarial examples – carefully perturbed samples of input that are usually misclassified. Many researchers have tried to develop a defense against adversarial examples; however, we are still far from achieving that goal. In this paper, we design a Generative Adversarial Net (GAN) based adversarial training defense, dubbed GanDef, which utilizes a competition game to regulate the feature selection during the training. We analytically show that GanDef can train a classifier so it can defend against adversarial examples. Through extensive evaluation on different white-box adversarial examples, the classifier trained by GanDef shows the same level of test accuracy as those trained by state-of-the-art adversarial training defenses. More importantly, GanDef-Comb, a variant of GanDef, could utilize the discriminator to achieve a dynamic trade-off between correctly classifying original and adversarial examples. As a result, it achieves the highest overall test accuracy when the ratio of adversarial examples exceeds 41.7%.
Fichier principal
Vignette du fichier
485650_1_En_2_Chapter.pdf (515.32 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03744311 , version 1 (02-08-2022)

Licence

Attribution

Identifiers

Cite

Guanxiong Liu, Issa Khalil, Abdallah Khreishah. GanDef: A GAN Based Adversarial Training Defense for Neural Network Classifier. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.19-32, ⟨10.1007/978-3-030-22312-0_2⟩. ⟨hal-03744311⟩
12 View
65 Download

Altmetric

Share

Gmail Facebook X LinkedIn More