Feature decoupling and interaction network for defending against adversarial examples

Weidong Wang, Zhi Li, Shuaiwei Liu, Li Zhang, Jin Yang, Yi Wang

Abstract: Highlights•This paper proposes a feature decoupling-interaction network (FDIN).•We introduces the concepts of clean features and adversarial features.•The FDIN separates the clean features and adversarial features.•We use the CW loss instead of the CE loss to improve the adversarial robustness.•The experimental results show that FDIN achieves better defense performance.