Re:Adversarial Learning for Good: On Deep Learning Blindspots
by oh_sigh on Friday December 29, 2017 @02:28PM
(#16031378)
Would adding random noise to an image before running it through the classifier mitigate these kinds of attacks?
[ Parent
| on HN ]
Re:Adversarial Learning for Good: On Deep Learning Blindspots
by yorwba on Friday December 29, 2017 @10:29PM
(#16033687)
No, ironically because classifiers are trained to be robust to noise. Adversarial examples are generated by altering the original in one specific dimension of a high-dimensional vector space. Random noise is vanishingly unlikely to undo that transformation, so the classification will stay wrong.