In-distribution adversarial attacks on object recognition models using gradient-free search

Spandan Madan, Tomotake Sasaki, Hanspeter Pfister +2

Neural networks are susceptible to small perturbations in the form of 2D rotations and shifts, image crops, and even changes in object colors. Past works attribute these errors to…