Detecting Adversarial Perturbations Through Spatial Behavior in Activation Spaces

Ziv Katzir, Yuval Elovici

Neural network based classifiers are still prone to manipulation through adversarial perturbations. State of the art attacks can overcome most of the defense or detection mechanism…