{"id":"W4311990442","doi":"10.48550/arxiv.2108.05075","title":"Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks","year":2021,"lang":"en","type":"preprint","venue":"arXiv (Cornell University)","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Adversarial system; Computer science; Deep neural networks; False positive paradox; Generative grammar; Bounded function; Artificial intelligence; Artificial neural network; Computer security; Machine learning; Mathematics","routes":{"ca_aff":false,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","research_integrity"],"consensus_categories":[],"category_scores_codex":[0.0005685847,0.0008897599,0.0008545162,0.0004049502,0.0005279558,0.0005330369,0.003627196,0.000720086,0.00009313749],"category_scores_gemma":[0.0002211168,0.001083548,0.0006831885,0.001177784,0.000205636,0.0007554221,0.006226527,0.003238886,0.00006392445],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006025307,"about_ca_system_score_gemma":0.0002935943,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0004485367,"about_ca_topic_score_gemma":0.000284408,"domain_scores_codex":[0.994503,0.0009245346,0.0004863403,0.002714853,0.0003231638,0.001048065],"domain_scores_gemma":[0.995312,0.0005003268,0.0006605531,0.0028007,0.0002924461,0.0004339125],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001285897,0.0001163483,0.002870598,0.00004634442,0.0001524888,0.003660086,0.0004101474,0.9646212,0.000005232052,0.02539605,0.00007501995,0.002517818],"study_design_scores_gemma":[0.001707394,0.00008438305,0.0003448389,0.0001287617,0.0001022797,0.000009048928,0.0002027897,0.9951834,0.00001197613,0.0009318213,0.0002581133,0.001035201],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1893162,0.00007422306,0.8017772,0.00014274,0.003768496,0.0004101621,0.000009004888,0.000578619,0.003923394],"genre_scores_gemma":[0.99308,0.00009245428,0.004450064,0.000682103,0.0007037459,0.000002653386,0.0001060082,0.00007996953,0.0008029961],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8037638,"threshold_uncertainty_score":0.9991615,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04675489863498341,"score_gpt":0.2123571774155322,"score_spread":0.1656022787805488,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}