The purpose of this study was to determine the necessity of previous non-algorithmic attacks (Adversarial Training) in light of algorithmic defense methods (Gradient Masking and Defensive Distillation) against FGSM attacks. We found a significant increase in image classification accuracy from defense methods with the non-algorithmic defense method compared to ones without. By analyzing the significance with a McNemar test, we determined that the inclusion of non-algorithmic defense methods is still necessary in light of new algorithmic defense methods.
Read More...