Perturbations are not Enough: Generating Adversarial Examples with Spatial Distortions

He Zhao, Trung Le, Paul Montague +3

Deep neural network image classifiers are reported to be susceptible to adversarial evasion attacks, which use carefully crafted images created to mislead a classifier. Recently, v…