s3
Re:Keras reimplementation of "One pixel attack for fooling deep neural...
on Tuesday February 27, 2018 @07:14PM (#16479466)
Ian Goodfellow and others have done a lot of great work exploring the properties of adversarial attacks. While all the things you’ve mentioned are great practices and important to avoid overfitting, adversarial attacks are not due to overfitting (nor are they random) and none of the things you described are sufficient as defenses.