3 ms·
I think that generative adversarial networks make the method ineffective. During the training of a GAN, the same type of distortions are applied to its training
by compressedgas 5y ago
I think that generative adversarial networks make the method ineffective. During the training of a GAN, the same type of distortions are applied to its training data to force it to generalize.
- mel_llaguno 5y agoWould this also apply to LowKey? https://arxiv.org/pdf/2101.07922.pdf https://arxiv.org/pdf/2101.07922.pdf
- compressedgas 5y agoI think that all methods that apply a distortion can have a GAN trained to ignore it. Both Fawkes and LowKey are adversarial example generators which can be used to produce training data that forces the model to become more robust. Once they are incorporated in training of the recognition system's model, their effectiveness as protection disappears.