Zachary Golan-Strieb

Demystifying the Adversarial Robustness of Random Transformation Defenses

2022 · arXiv (Cornell University)

Neural networks' lack of robustness against attacks raises concerns in security-sensitive settings such as autonomous vehicles. While many countermeasures may look promising, only a few withstand rigorous evaluation. Defenses using random transformations (RT) have shown …