Minority Reports Defense: Defending Against Adversarial Patches

Michael McCoyd, Won Park, Steven Chen +5

Deep learning image classification is vulnerable to adversarial attack, even if the attacker changes just a small patch of the image. We propose a defense against patch attacks bas…