Skip to main content
Fig. 1 | EURASIP Journal on Information Security

Fig. 1

From: Deep neural rejection against adversarial examples

Fig. 1

Architecture of deep neural rejection (DNR). DNR considers different network layers and learns an SVM with the RBF kernel on each of their representations. The outputs of these SVMs are then combined using another RBF SVM, which will provide prediction scores s1,…,sc for each class. This classifier will reject samples if the maximum score maxk=1,…,csk is not higher than the rejection threshold θ. This decision rule can be equivalently represented as arg maxk=0,…,csk(x), if we consider rejection as an additional class with s0=θ

Back to article page