Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2511.01377 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915592559132672 |
|---|---|
| author | Khorasani, Amir Hossein Jahanian, Ali Rastgarpour, Maryam |
| author_facet | Khorasani, Amir Hossein Jahanian, Ali Rastgarpour, Maryam |
| contents | Machine learning is a powerful tool for building predictive models. However, it is vulnerable to adversarial attacks. Fast Gradient Sign Method (FGSM) attacks are a common type of adversarial attack that adds small perturbations to input data to trick a model into misclassifying it. In response to these attacks, researchers have developed methods for "unlearning" these attacks, which involves retraining a model on the original data without the added perturbations. Machine unlearning is a technique that tries to "forget" specific data points from the training dataset, to improve the robustness of a machine learning model against adversarial attacks like FGSM. In this paper, we focus on applying unlearning techniques to the LeNet neural network, a popular architecture for image classification. We evaluate the efficacy of unlearning FGSM attacks on the LeNet network and find that it can significantly improve its robustness against these types of attacks. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2511_01377 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | Protecting the Neural Networks against FGSM Attack Using Machine Unlearning Khorasani, Amir Hossein Jahanian, Ali Rastgarpour, Maryam Machine Learning Machine learning is a powerful tool for building predictive models. However, it is vulnerable to adversarial attacks. Fast Gradient Sign Method (FGSM) attacks are a common type of adversarial attack that adds small perturbations to input data to trick a model into misclassifying it. In response to these attacks, researchers have developed methods for "unlearning" these attacks, which involves retraining a model on the original data without the added perturbations. Machine unlearning is a technique that tries to "forget" specific data points from the training dataset, to improve the robustness of a machine learning model against adversarial attacks like FGSM. In this paper, we focus on applying unlearning techniques to the LeNet neural network, a popular architecture for image classification. We evaluate the efficacy of unlearning FGSM attacks on the LeNet network and find that it can significantly improve its robustness against these types of attacks. |
| title | Protecting the Neural Networks against FGSM Attack Using Machine Unlearning |
| topic | Machine Learning |
| url | https://arxiv.org/abs/2511.01377 |