4 ms·
Key idea: it's possible to design a "patch" (a small portion of an image) that is extremely salient to a neural network, which can fool the network into misclas
by isp 9y ago
Key idea: it's possible to design a "patch" (a small portion of an image) that is extremely salient to a neural network, which can fool the network into misclassifying the overall larger image. This "patch" can be printed out as a real-life sticker. See Figure 1 on page 2.
- jwilk 9y agohttps://i.imgur.com/wF1THeV.png https://i.imgur.com/wF1THeV.png Video demonstration: https://www.youtube.com/watch?v=i1sp4X57TL4 https://www.youtube.com/watch?v=i1sp4X57TL4