Abstract
Although Deep Neural Networks(DNNs) have achieved successful applications inmany fields, they are vulnerable to adversarial examples.Adversarial trainingis one of the most effective methods to improve the robustness of DNNs, and itis generally considered as solving a saddle point problem that minimizes riskand maximizes perturbation.Therefore, powerful adversarial examples caneffectively replicate the situation of perturbation maximization to solve thesaddle point problem.The method proposed in this paper approximates the outputof DNNs in the input neighborhood by using the Taylor expansion, and thenoptimizes it by using the Lagrange multiplier method to generate adversarialexamples. If it is used for adversarial training, the DNNs can be effectivelyregularized and the defects of the model can be improved.