3 ms·
Note that to generate perturbations you need access to the underlying model. The attack is just optimising towards a specific class with added cost for visual d
by verroq 10y ago
Note that to generate perturbations you need access to the underlying model. The attack is just optimising towards a specific class with added cost for visual differences.
- mholt 10y agoThat's not entirely true: > If we transfer adversarial examples from one model to another model trained with one of these defenses, the attack often succeeds, even when a direct attack on the second model would fail [PMG16]. http://www.cleverhans.io/security/privacy/ml/2017/02/15/why-attacking-machine-learning-is-easier-than-defending-it.html http://www.cleverhans.io/security/privacy/ml/2017/02/15/why-...