Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?

Simran Kaur, Jeremy Cohen, Zachary C. Lipton

For a standard convolutional neural network, optimizing over the input pixels to maximize the score of some target class will generally produce a grainy-looking version of the orig…