Buckman J, Roy A, Raffel C, et al. Thermometer encoding: One hot way to resist adversarial examples[J]. 2018.
1. Overview
In this paper
- proposed thermometer encoding to defense adversarial attacks
- demonstrate the robustness with experiments on the MNIST, CIFAR-10, CIFAR-100 and SVHN datasets.
1.1. One-Hot Encoding
1.2. Thermometer Encoding
- (B, 3, H, W)→ (B, 3*levels, H, W)
- (B, 3*levels, H, W)→ ResNet
1.3. Experiments
