5 ms·
Essentially: previously, small local perturbations (everywhere though) could make an image look imperceptibly different to a human but be totally misclassified.
by wrsh07 9y ago
Essentially: previously, small local perturbations (everywhere though) could make an image look imperceptibly different to a human but be totally misclassified.
This research says: defending against that is not enough.
If you're allowed to vastly modify a small area of the picture, you can once again achieve misclassification.
- wrsh07 9y agoAlso: > This departs from most prior work on adversarial perturbations in the fact that this perturbation is universal in that it works for any background.