Goto

Collaborating Authors

 Asia










AdversarialFeatureDesensitization

Neural Information Processing Systems

This is achieved through a game where we learn features that are both predictive and robust (insensitive to adversarial attacks), i.e. cannot beused todiscriminate between natural andadversarial data.