Output Randomization: A Novel Defense for both White-box and Black-box Adversarial Models

Daniel Park, Haidar Khan, Azer Khan +2

Adversarial examples pose a threat to deep neural network models in a variety of scenarios, from settings where the adversary has complete knowledge of the model in a "white box" s…