{"id":"W4383221314","doi":"10.1145/3579856.3582816","title":"Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks","year":2023,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":20,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Adversarial system; Deep neural networks; Computer science; Bounded function; Artificial neural network; Artificial intelligence; Computer security; Mathematics","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0007325545,0.0003797337,0.000343622,0.000266295,0.0004325127,0.0002958842,0.001518544,0.0001667432,0.00009871347],"category_scores_gemma":[0.0002705999,0.0003485888,0.0002047532,0.001456413,0.00007899001,0.0005891228,0.001074643,0.0007991747,0.000571537],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001056481,"about_ca_system_score_gemma":0.0000479943,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001610717,"about_ca_topic_score_gemma":0.0001149077,"domain_scores_codex":[0.9967804,0.0003153606,0.0004165249,0.0009143028,0.0006317623,0.0009416821],"domain_scores_gemma":[0.9978161,0.000604639,0.0001666756,0.001088861,0.00007983154,0.0002439204],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000435252,0.00002811687,0.001644465,0.000005591243,0.00002314141,0.0002796093,0.0003755142,0.9396541,0.00001918371,0.02020049,0.001373309,0.03635302],"study_design_scores_gemma":[0.001257684,0.0001029652,0.0008697992,0.00001201411,0.000008094117,0.000005914286,0.00008871895,0.994399,0.0000217193,0.0003021407,0.002519147,0.0004127959],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04423396,0.00001537446,0.9299509,0.001326409,0.003286116,0.0003191978,0.000002098183,0.002082595,0.01878335],"genre_scores_gemma":[0.9837213,0.000009494865,0.01122574,0.002168206,0.0008373829,0.00002364343,0.00002765378,0.00005238677,0.001934248],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9394873,"threshold_uncertainty_score":0.9998966,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01892275119627844,"score_gpt":0.2824500811946555,"score_spread":0.2635273299983771,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}