I'm not sure why hackers prefer to hack large scale computer systems rather than individual humans, but they do. So we have to protect neural networks against a

I'm not sure why hackers prefer to hack large scale computer systems rather than individual humans, but they do. So we have to protect neural networks against adversarial examples for the same reason we have to protect databases against sql injections. > so what's the critical difference here? If neural networks are deployed at scale in self driving cars, a single bug could trigger millions of accidents. Printing an adversarial example on billboards would lead to crashes all around the country. Are we going to assume no one is going to try? (btw: real world adversarial examples are easy to craft [1]). [1] https://arxiv.org/pdf/1707.07397.pdf https://arxiv.org/pdf/1707.07397.pdf