Defense Through Diverse Directions

Christopher M. Bender, Yang Li, Yifeng Shi, Michael K. Reiter, Junier Oliva

Abstract: In this work we develop a novel Bayesian neural network methodology to achieve strong adversarial robustness without the need for online adversarial training. Unlike previous efforts in this direct...