News for hackers. Stuff that matters.

A comment on Audio Adversarial Examples. Parent comment

Re:Audio Adversarial Examples by chestervonwinch on Tuesday January 30, 2018 @08:43PM (#16270686)
To generate adversarials, you really just the Jacobian of the network, which, without the network architecture, etc., would require estimation via finite differences which would require running the same signal as input multiple (lots! for large signals) times with minor perturbations to each component. I think whether or not this is feasible depends on the circumstances. Also, I could be wrong about everything because I'm not super current on this stuff.
[ Parent | on HN ]
Re:Audio Adversarial Examples by whataretensors on Wednesday January 31, 2018 @04:10AM (#16272561)
You don't need access to the network, you can just build another one.

https://arxiv.org/abs/1602.02697

"Our attack strategy consists in training a local model to substitute for the target DNN, using inputs synthetically generated by an adversary and labeled by the target DNN"

[ Parent | on HN ]
Re:Audio Adversarial Examples by chestervonwinch on Wednesday January 31, 2018 @06:45AM (#16273143)
that's clever and sneaky!
[ Parent | on HN ]