English

MAD-VAE: Manifold Awareness Defense Variational Autoencoder

Cryptography and Security 2020-11-04 v1 Machine Learning

Abstract

Although deep generative models such as Defense-GAN and Defense-VAE have made significant progress in terms of adversarial defenses of image classification neural networks, several methods have been found to circumvent these defenses. Based on Defense-VAE, in our research we introduce several methods to improve the robustness of defense models. The methods introduced in this paper are straight forward yet show promise over the vanilla Defense-VAE. With extensive experiments on MNIST data set, we have demonstrated the effectiveness of our algorithms against different attacks. Our experiments also include attacks on the latent space of the defensive model. We also discuss the applicability of existing adversarial latent space attacks as they may have a significant flaw.

Keywords

Cite

@article{arxiv.2011.01755,
  title  = {MAD-VAE: Manifold Awareness Defense Variational Autoencoder},
  author = {Frederick Morlock and Dingsu Wang},
  journal= {arXiv preprint arXiv:2011.01755},
  year   = {2020}
}

Comments

15 pages, 13 figures

R2 v1 2026-06-23T19:53:15.427Z