Re:Images that fool computer vision raise security concerns
by compbio on Monday March 23, 2015 @02:18PM
(#9252486)
Very interesting. Thank you for correcting me.
a relatively large fraction of examples will be misclassified by networks trained from scratch with different hyper-parameters (number of layers, regularization or initial weights). The above observations suggest that adversarial examples are somewhat universal...
>In addition, the specific nature of these perturbations is not a random artifact of learning: the same perturbation can cause a different network, that was trained on a different subset of the dataset, to misclassify the same input.