Случайное сглаживание
method
ID: randomizedsmoothing
Related Papers
SAFER: A Structure-free Approach for Certified Robustness to Adversarial Word Substitutions
AbstractState-of-the-art NLP models can often be fooled by human-unaware transformations such as synonymous word substitution. For security reasons, it is of critical importance to develop models with certified robustness that …...
Sequential Randomized Smoothing for Adversarially Robust Speech Recognition
AbstractWhile Automatic Speech Recognition has been shown to be vulnerable to adversarial attacks, defenses against these attacks are still lagging. Existing, naive defenses can be partially broken with an adaptive …...