Cycle-Consistent Adversarial GAN: The Integration of Adversarial Attack and Defense

<div>Recognition performance. Before testing, clean instances and adversarial examples, respectively, were fed into trained <svg height="11.8174pt" id="M158" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -8.6359 15.9522 11.8174" width="15.9522pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M673 297H417L411 270C517 261 522 258 506 183L487 92C476 38 428 19 360 19C207 19 123 132 123 287C123 472 243 631 441 631C557 631 617 583 617 469L647 472C650 545 655 604 658 632C625 643 554 666 467 666C201 666 23 502 23 278C23 90 156 -16 339 -16C410 -16 501 6 569 24C566 43 567 70 573 101L589 183C604 259 607 262 667 271L673 297Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,8.827,3.132)"><path d="M722 32C646 41 636 48 622 116L544 496L509 667L472 658L153 123C106 45 93 42 27 32L18 0H259L268 32C178 40 172 48 204 107L272 233H509C523 180 533 137 540 96C548 50 546 39 466 32L457 0H714L722 32ZM502 283H299L448 547H450L502 283Z"></path></g></svg> and <svg height="11.8174pt" id="M159" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -8.6359 16.5185 11.8174" width="16.5185pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M673 297H417L411 270C517 261 522 258 506 183L487 92C476 38 428 19 360 19C207 19 123 132 123 287C123 472 243 631 441 631C557 631 617 583 617 469L647 472C650 545 655 604 658 632C625 643 554 666 467 666C201 666 23 502 23 278C23 90 156 -16 339 -16C410 -16 501 6 569 24C566 43 567 70 573 101L589 183C604 259 607 262 667 271L673 297Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,8.827,3.132)"><path d="M786 370C786 572 637 650 431 650H137L130 618C217 606 220 603 204 519L129 127C115 48 107 39 26 30L18 0H270C410 0 516 20 609 75C722 140 786 240 786 370ZM683 373C683 178 547 40 323 40C298 40 264 40 241 45C213 51 207 64 220 127L295 545C304 582 309 595 320 601C335 610 367 613 406 613C570 613 683 538 683 373Z"></path></g></svg> before being recognized. (a) The CycleAdvGAN in MNIST dataset. (b) The CycleAdvGAN in CIFAR10 dataset.</div>

Security and Communication Networks

fig3

Figure 3

Figure 3: Cycle-Consistent Adversarial GAN: The Integration of Adversarial Attack and Defense 