Adversarial Risk Bounds through Sparsity based Compression

Emilio Rafael Balda, Niklas Koep, Arash Behboodi, Rudolf Mathar

Abstract: Neural networks have been shown to be vulnerable against minor adversarial perturbations of their inputs, especially for high dimensional data under $\ell_\infty$ attacks.To combat this problem, te...