3 ms·
To generate adversarials, you really just the Jacobian of the network, which, without the network architecture, etc., would require estimation via finite differ
by chestervonwinch 9y ago
To generate adversarials, you really just the Jacobian of the network, which, without the network architecture, etc., would require estimation via finite differences which would require running the same signal as input multiple (lots! for large signals) times with minor perturbations to each component. I think whether or not this is feasible depends on the circumstances. Also, I could be wrong about everything because I'm not super current on this stuff.
- whataretensors 9y agoYou don't need access to the network, you can just build another one. https://arxiv.org/abs/1602.02697 https://arxiv.org/abs/1602.02697 "Our attack strategy consists in training a local model to substitute for the target DNN, using inputs synthetically generated by an adversary and labeled by the target DNN"
- chestervonwinch 9y agothat's clever and sneaky!