Why Blocking Targeted Adversarial Perturbations Impairs the Ability to Learn

Ziv Katzir, Yuval Elovici

Despite their accuracy, neural network-based classifiers are still prone to manipulation through adversarial perturbations. Those perturbations are designed to be misclassified by…