Just read this paper. Short summary: when thinking of defenses to adversarial examples in ML, think of the threat model carefully.
Nice paper. Also won the best paper award at ICML 2018 (@icmlconf )
Congrats to the authors!!
arxiv.org/abs/1802.00420
Here's an article by @UofT about our new work on adversarial attacks on Face Detectors that help you preserve your privacy. news.engineering.utoronto.ca…
Think BatchNorm helps training due to reducing internal covariate shift? Think again. (What BatchNorm *does* seem to do though, both empirically and in theory, is to smoothen out the optimization landscape.) (with @ShibaniSan@tsiprasd@andrew_ilyas) arxiv.org/abs/1805.11604
Excited by this direction of formal investigation for adversarial defences: Adversarial examples from computational constraints, Bubeck et al arxiv.org/abs/1805.10204
"No pixels are manipulated in this talk. No pandas are harmed..."
Great ways to differentiate your talk from the rest of talks on adversarial examples... no more pandas please 😀
I'm speaking at the 1st Deep Learning and Security workshop (co-located with @IEEESSP ) at 1:30 today: ieee-security.org/TC/SPW2018… I'll discuss research into defenses against adversarial examples, including future directions. Slides and lecture notes here: iangoodfellow.com/slides/201…
This paper shows how to make adversarial examples with GANs. No need for a norm ball constraint. They look unperturbed to a human observer but break a model trained to resist large perturbations. arxiv.org/pdf/1805.07894.pdf
LaVAN: Localized and Visible Adversarial Noise. A method to generate adversarial noise which is confined to small, localized patch of the image without covering any main objects of the image.
arxiv.org/abs/1801.02608
Two papers accepted to ICML 2018. Congrats to all my amazing co-authors. Both on adversarial ML. The arxiv
version of the papers are up, but we will update it soon based on reviewer comments.
Arxiv versions: arxiv.org/abs/1711.08001 and
arxiv.org/abs/1706.03922
IBM Ireland just released "The Adversarial Robustness Toolbox: Securing AI Against Adversarial Threats". This library will allow rapid crafting and analysis of attacks and defense methods for machine learning models.
ibm.com/blogs/research/2018/…#MachineLearningSecurity#AdversarialML