Fisher信息量在对抗样本中的应用

Inspecting adversarial examples using the Fisher informationFθ=ED∼p(D∣θ)[∇θlog⁡p(D∣θ)∇θ⊤log⁡p(D∣θ)]=−ED∼p(D∣θ)[∇θ∇θ⊤log⁡p(D∣θ)]\begin{aligned}\mathbb{F}_\theta&=\mathbb{E}_{\mathcal{D}\sim p(\mathcal{D}|\theta)}[\nabla_\theta \log p(\mathcal{D}|\theta