Yilong Ju

Local Convolutions Cause an Implicit Bias towards High Frequency Adversarial Examples

2020 · arXiv (Cornell University)

Adversarial Attacks are still a significant challenge for neural networks. Recent work has shown that adversarial perturbations typically contain high-frequency features, but the root cause of this phenomenon remains unknown. Inspired by theoretical work on …