loading
Papers

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Hamed H. Aghdam ; Elnaz J. Heravi and Domenec Puig

Affiliation: Rovira i Virgili University, Spain

ISBN: 978-989-758-226-4

Keyword(s): Adversarial Examples, Convolutional Neural Networks, Lipschitz Constant.

Abstract: Vulnerability of ConvNets to adversarial examples have been mainly studied by devising a solution for generating adversarial examples. Early studies suggested that sensitivity of ConvNets to adversarial examples are due to their non-linearity. Most recent studies explained that instability of ConvNet to these examples are because of their linear nature. In this work, we analyze some of local properties of ConvNets that are directly related to their unreliability to adversarial examples. We shows that ConvNets are not locally isotropic and symmetric. Also, we show that Mantel score of distance matrices in the input and output of a ConvNet is very low showing that topology of points located at a very close distance to a samples might significantly change by ConvNets. We also explain that non-linearity of topology changes in ConvNet are because they apply an affine transformation in each layer. Furthermore, we explain that despite the fact that global Lipschitz constant of a ConvNet migh t be greater than 1, it is locally less than 1 in most of adversarial examples. (More)

PDF ImageFull Text

Download
CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.234.245.125

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Aghdam, H.; Heravi, E. and Puig, D. (2017). Explaining Adversarial Examples by Local Properties of Convolutional Neural Networks.In Proceedings of the 12th International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications - Volume 5 VISAPP: VISAPP, (VISIGRAPP 2017) ISBN 978-989-758-226-4, pages 226-234. DOI: 10.5220/0006123702260234

@conference{visapp17,
author={Hamed H. Aghdam. and Elnaz J. Heravi. and Domenec Puig.},
title={Explaining Adversarial Examples by Local Properties of Convolutional Neural Networks},
booktitle={Proceedings of the 12th International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications - Volume 5 VISAPP: VISAPP, (VISIGRAPP 2017)},
year={2017},
pages={226-234},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0006123702260234},
isbn={978-989-758-226-4},
}

TY - CONF

JO - Proceedings of the 12th International Joint Conference on Computer Vision, Imaging and Computer Graphics Theory and Applications - Volume 5 VISAPP: VISAPP, (VISIGRAPP 2017)
TI - Explaining Adversarial Examples by Local Properties of Convolutional Neural Networks
SN - 978-989-758-226-4
AU - Aghdam, H.
AU - Heravi, E.
AU - Puig, D.
PY - 2017
SP - 226
EP - 234
DO - 10.5220/0006123702260234

Login or register to post comments.

Comments on this Paper: Be the first to review this paper.