Baolin Li1, Tao Hu1,2,3,*, Xinlei Liu1, Jichao Xie1, Peng Yi1,2,3
CMC-Computers, Materials & Continua, Vol.85, No.1, pp. 2141-2155, 2025, DOI:10.32604/cmc.2025.066370
- 29 August 2025
Abstract Deep neural networks are known to be vulnerable to adversarial attacks. Unfortunately, the underlying mechanisms remain insufficiently understood, leading to empirical defenses that often fail against new attacks. In this paper, we explain adversarial attacks from the perspective of robust features, and propose a novel Generative Adversarial Network (GAN)-based Robust Feature Disentanglement framework (GRFD) for adversarial defense. The core of GRFD is an adversarial disentanglement structure comprising a generator and a discriminator. For the generator, we introduce a novel Latent Variable Constrained Variational Auto-Encoder (LVCVAE), which enhances the typical beta-VAE with a constrained rectification module… More >