Ali Borji

Shape Defense Against Adversarial Attacks

2020 · arXiv (Cornell University)

Humans rely heavily on shape information to recognize objects. Conversely, convolutional neural networks (CNNs) are biased more towards texture. This is perhaps the main reason why CNNs are vulnerable to adversarial examples. Here, we explore …