@article{Zhao2023, 
author = {Junjie Zhao and Junfeng Wu and James Msughter Adeke and Guangjie Liu and Yuewei Dai},
title = {EITGAN: A Transformation-based Network for recovering adversarial examples},
year = {2023},
journal = {Electronic Research Archive},
volume = {31},
number = {11},
pages = {6634-6656},
keywords = {enhanced sample, Generative Adversarial Network, adversarial defense, deep learning, adversarial example, image processing},
url = {https://www.sciopen.com/article/10.3934/era.2023335},
doi = {10.3934/era.2023335},
abstract = {Adversarial examples have been shown to easily mislead neural networks, and many strategies have been proposed to defend them. To address the problem that most transformation-based defense strategies will degrade the accuracy of clean images, we proposed an Enhanced Image Transformation Generative Adversarial Network (EITGAN). Positive perturbations were employed in the EITGAN to counteract adversarial effects while enhancing the classified performance of the samples. We also used the image super-resolution method to mitigate the effect of adversarial perturbations. The proposed method does not require modification or retraining of the classifier. Extensive experiments demonstrated that the enhanced samples generated by the EITGAN effectively defended against adversarial attacks without compromising human visual recognition, and their classification performance was superior to that of clean images.}
}