{"id":"W4226140795","doi":"10.1007/978-3-031-01333-1_18","title":"AGS: Attribution Guided Sharpening as a Defense Against Adversarial Attacks","year":2022,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Toronto; University of British Columbia, Okanagan Campus; University of British Columbia","funders":"","keywords":"MNIST database; Sharpening; Computer science; Adversarial system; Oracle; Deep neural networks; Artificial intelligence; Deep learning; Classifier (UML); Artificial neural network; Benchmark (surveying); Machine learning; Handwriting; Software engineering","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","open_science","research_integrity"],"consensus_categories":[],"category_scores_codex":[0.00249175,0.0009451436,0.0009063428,0.001337095,0.001237359,0.0008311705,0.006253311,0.0005137741,0.0003253456],"category_scores_gemma":[0.0006032105,0.00100891,0.0003413339,0.001389091,0.000693862,0.001534157,0.006394422,0.002861159,0.0001626371],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001579414,"about_ca_system_score_gemma":0.001479828,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001109922,"about_ca_topic_score_gemma":0.00003369483,"domain_scores_codex":[0.9923344,0.0002109327,0.001004784,0.002785863,0.002382576,0.00128149],"domain_scores_gemma":[0.995453,0.0008667873,0.0007924408,0.002203097,0.0003644845,0.0003202085],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002648325,0.00002902581,0.00008905219,0.00002941479,0.00002985713,0.0005439375,0.001197111,0.6809713,0.000103461,0.0633647,0.00008793423,0.2535277],"study_design_scores_gemma":[0.001143896,0.000318071,0.00005998502,0.0003652125,0.00003094622,0.0002963849,9.721304e-7,0.9018927,0.0002193843,0.05911896,0.03488421,0.001669289],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.0002432435,0.0002518496,0.9800957,0.001001515,0.005690235,0.0006625772,0.00001325613,0.0005073753,0.01153425],"genre_scores_gemma":[0.2559539,0.0001175544,0.732116,0.006792936,0.003088551,0.0000722327,0.0001674522,0.0002267133,0.001464562],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.2557107,"threshold_uncertainty_score":0.9994393,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02268317233576097,"score_gpt":0.2769208999543222,"score_spread":0.2542377276185613,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}