Revisiting Min-Max Optimization Problem in Adversarial Training

[Submitted on 20 Aug 2024]

View a PDF of the paper titled Revisiting Min-Max Optimization Problem in Adversarial Training, by Sina Hajer Ahmadi and 1 other authors

View PDF
HTML (experimental)

Abstract:The rise of computer vision applications in the real world puts the security of the deep neural networks at risk. Recent works demonstrate that convolutional neural networks are susceptible to adversarial examples – where the input images look similar to the natural images but are classified incorrectly by the model. To provide a rebuttal to this problem, we propose a new method to build robust deep neural networks against adversarial attacks by reformulating the saddle point optimization problem in cite{madry2017towards}. Our proposed method offers significant resistance and a concrete security guarantee against multiple adversaries. The goal of this paper is to act as a stepping stone for a new variation of deep learning models which would lead towards fully robust deep learning models.