3 ms·

I wonder why the network picks a riffle. Do you have any explanation about that?

• anishathalye 9y ago
  It's a targeted adversarial example, we can do this for _any_ target class. We chose for our demo example to turn the turtle into a rifle, which was chosen uniformly at random from the 1000 ImageNet classes. In our paper, we have many more examples with different target classes, all chosen uniformly at random.
  • mabynogy 9y ago
    OK. Many thanks for the details.