Adi Shamir

A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance

2019 · arXiv (Cornell University)

The existence of adversarial examples in which an imperceptible change in the input can fool well trained neural networks was experimentally discovered by Szegedy et al in 2013, who called them "Intriguing properties of neural …