Goto

Collaborating Authors

 Banff





On the Limitations of Stochastic Pre-processing Defenses

Neural Information Processing Systems

Defending against adversarial examples remains an open problem. A common belief is that randomness at inference increases the cost of finding adversarial inputs. An example of such a defense is to apply a random transformation to inputs prior to feeding them to the model.


DropGNN: Random Dropouts Increase the Expressiveness of Graph Neural Networks

Neural Information Processing Systems

Then, we combine the results of these runs to obtain the final result. We prove that DropGNNs can distinguish various graph neighborhoods that cannot be separated by message passing GNNs.