4 ms·
Or just adding a small amount of random noise to the input, which would wipe out the carefully constructed attack.
by hahajk 8y ago
Or just adding a small amount of random noise to the input, which would wipe out the carefully constructed attack.
- ipsa 8y agoYou can try out this technique at https://github.com/google/unrestricted-adversarial-examples https://github.com/google/unrestricted-adversarial-examples My guess is it would have the same result as adding noise to the normal images too (resulting in a slightly worse performance overall).