How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples

Utku Ozbulak, Wesley De Neve, Arnout Van Messem

Even before deep learning architectures became the de facto models for complex computer vision tasks, the softmax function was, given its elegant properties, already used to analyz…