4 ms·
> Why do individual pixels get so much power about what the network decides to classify its output as? This paper isn't about tricking a NN to classify incorre
by panarky 8y ago
> Why do individual pixels get so much power about what the network decides to classify its output as?
This paper isn't about tricking a NN to classify incorrectly. It's about getting the NN to perform a completely different task.
We introduce adversarial attacks that instead reprogram the target model to perform a task chosen by the attacker
- Erlich_Bachman 8y agoThe question applies to this field, not limited to this specific paper. It's already clear from the abstract that this is paper is doing it's own thing. But it is still based on the phenomenon of adversarial examples.