(ICLR 2018) Thermometer encoding:One hot way to resist adversarial examples

Buckman J, Roy A, Raffel C, et al. Thermometer encoding: One hot way to resist adversarial examples[J]. 2018.

1. Overview

In this paper

  • proposed thermometer encoding to defense adversarial attacks
  • demonstrate the robustness with experiments on the MNIST, CIFAR-10, CIFAR-100 and SVHN datasets.

1.1. One-Hot Encoding

1.2. Thermometer Encoding

  • (B, 3, H, W)→ (B, 3*levels, H, W)
  • (B, 3*levels, H, W)→ ResNet

1.3. Experiments