3 ms·
Adversarial images need to be made with knowledge of the model.
by lozenge 9y ago
Adversarial images need to be made with knowledge of the model.
- yorwba 9y agoActually, no [1]. From the abstract: We can cause the network to misclassify an image by applying a certain imperceptible perturbation, which is found by maximizing the network's prediction error. In addition, the specific nature of these perturbations is not a random artifact of learning: the same perturbation can cause a different network, that was trained on a different subset of the dataset, to misclassify the same input. [1] https://arxiv.org/abs/1312.6199 https://arxiv.org/abs/1312.6199 EDIT: Also interesting: "Universal Adversarial Perturbations" https://arxiv.org/abs/1610.08401 https://arxiv.org/abs/1610.08401