News for hackers. Stuff that matters.
Re:Optical illusions that flummox computers by zitterbewegung on Saturday April 15, 2017 @05:46PM (#14123017)
I was at DEFCON and the most interesting thing I saw there was that not only can you confuse deep learning networks but your adversarial examples have a high chance of transferring to other ML techniques. See https://raw.githubusercontent.com/cchio/deep-pwning/master/d...
Re:Optical illusions that flummox computers by moultano on Saturday April 15, 2017 @06:00PM (#14123084)
The best explanation of why these transfer that I've seen is that the problem inherently arises from dot-products in high dimensions. Real data is somewhat random w.r.t. any particular set of activation coefficients, so the dot product looks like a sum of random variables and is subject to the central limit theorem. This keeps the real dot products small. If you are able to inject a teeny bit of the activation coefficients into the input, then as the dimensionality grows it gets easier and easier to overwhelm the real data with an epsilon sized change to the input.