Adversarial Robustness in Machine Learning

Simulating a Primary Visual Cortex at the Front of CNNs Improves Robustness to Image Perturbations

A fixed-weight, biologically parameterised V1 front-end gives standard image classifiers adversarial and corruption robustness at no extra training cost; its simulated neuronal noise drives most of the adversarial gain.