Towards Black-box Adversarial Example Detection: A Data Reconstruction-based Method

Adversarial example detection is known to be an effective adversarial defense method. Black-box attack, which is a more realistic threat and has led to various black-box adversarial training-based defense methods, however, does not attract considerable attention in adversarial example detection. In this paper, we fill this gap by positioning the problem of black-box adversarial example detection (BAD). Data analysis under the introduced BAD settings demonstrates (1) the incapability of existing detectors in addressing the black-box scenario and (2) the potential of exploring BAD solutions from a data perspective. To tackle the BAD problem, we propose a data reconstruction-based adversarial example detection method. Specifically, we use variational auto-encoder (VAE) to capture both pixel and frequency representations of normal examples. Then we use reconstruction error to detect adversarial examples. Compared with existing detection methods, the proposed method achieves substantially better detection performance in BAD, which helps promote the deployment of adversarial example detection-based defense solutions in real-world models.Comment: 14 pages, 8 figures, 13 table

Acceleration compensation of a novel piezoelectric balance for the short duration impulse measurement: a time series analysis approach

A novel piezoelectric balance was developed to measure the six-component forces for the complex aircraft scaled model in the impulse combustion wind tunnel at a short duration airloads Mach number of 5. The piezoelectric balance using four triaxial piezoelectric load cells yields the high stiffness, sensitive and good dynamic response characteristics. The dynamic model-balance system was built to analyze the vibration characteristic. The time series analysis approach was developed on the basis of the system transfer function and the natural frequency, and the accelerated forces which induce the airloads overshooting oscillations had been obtained by the second order derivatives function. The experimental results have shown that the problem of overshooting oscillations effect of the impulse can be effectively solved by the acceleration compensation technology for the complex test model with the novel piezoelectric balance