Thwarting finite difference adversarial attacks with output randomization

Haidar Khan, Daniel Park, Azer Khan +1

Adversarial examples pose a threat to deep neural network models in a variety of scenarios, from settings where the adversary has complete knowledge of the model and to the opposit…