The Defense of Adversarial Example with Conditional Generative Adversarial Networks

Figure 2

The training framework of defense mechanism with the conditional GAN. This framework consists of a generator and a discriminator. The generator takes adversarial images as input and eliminates perturbations in . Then, we obtain . The discriminator is used to distinguish the generated data and the original instance , where denotes the clean images.