2 ms·
This is not my area, but couldn’t this problem be solved by adding random noise to the input data such that the adversary can’t control what is passed into syst
by danieltillett 11y ago
This is not my area, but couldn’t this problem be solved by adding random noise to the input data such that the adversary can’t control what is passed into system? You would trade off accuracy for robustness.
- deleted 11y ago[deleted]
- russdill 11y agoI feel like the network needs random data. Perhaps random recombinations of a larger training set. It would lower the accuracy of the network, but be more resilient against these sorts of attacks. Sort of like sort algorithms that include randomness.