{"id":"W2901440361","doi":"10.1109/cvpr.2019.00445","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","year":2019,"lang":"en","type":"preprint","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":16,"is_retracted":false,"has_abstract":true,"ca_institutions":"Artificial Intelligence in Medicine (Canada); École de Technologie Supérieure","funders":"Natural Sciences and Engineering Research Council of Canada; Conselho Nacional de Desenvolvimento Científico e Tecnológico","keywords":"MNIST database; Adversarial system; Norm (philosophy); Computer science; Decoupling (probability); Artificial intelligence; Robustness (evolution); Perturbation (astronomy); Algorithm; Pattern recognition (psychology); Mathematical optimization; Machine learning; Deep learning; Mathematics; Engineering","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0006779849,0.0003930515,0.0004565181,0.000260428,0.0003145608,0.0003954886,0.0005277445,0.0003188452,0.00000653441],"category_scores_gemma":[0.0003185363,0.0003748213,0.0001364776,0.0001348978,0.0000860696,0.0001429908,0.001433538,0.00052605,0.000004845463],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001314246,"about_ca_system_score_gemma":0.0001703378,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001958296,"about_ca_topic_score_gemma":0.00004270875,"domain_scores_codex":[0.9976583,0.00006896603,0.0003628582,0.001192094,0.0003052374,0.0004125773],"domain_scores_gemma":[0.9980271,0.0007464154,0.000297964,0.0006475016,0.0001466342,0.0001343154],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00007781844,0.00004491565,0.004099441,0.0003065574,0.00005129709,0.0000030131,0.0004106751,0.974861,0.00005546468,0.004760908,0.0001082508,0.01522071],"study_design_scores_gemma":[0.001170941,0.00009410165,0.001758638,0.0001212776,0.0000559714,0.000006630548,0.00003259477,0.9947758,0.0002078671,0.0006054479,0.0007242396,0.0004465026],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1334525,0.0001910933,0.8611178,0.0003195814,0.0033231,0.0008620561,0.000007551749,0.0002885264,0.0004377633],"genre_scores_gemma":[0.8027504,0.00002003703,0.1965228,0.0001302583,0.0002800982,0.00006119081,0.00002351817,0.00003521104,0.0001764869],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.6692979,"threshold_uncertainty_score":0.9998704,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0169786913421727,"score_gpt":0.274125652303942,"score_spread":0.2571469609617693,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}