Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks

1 code implementation • 11 Aug 2021 • Zitao Chen, Pritam Dash, Karthik Pattabiraman

Therefore, Jujutsu leverages generative adversarial networks (GAN) to perform localized attack recovery by synthesizing the semantic contents of the input that are corrupted by the attacks, and reconstructs a ``clean'' input for correct prediction.

Image Classification Image Inpainting