On the human-recognizability phenomenon of adversarially trained deep image classifiers

Jonathan Helland, Nathan VanHoudnos

In this work, we investigate the phenomenon that robust image classifiers have human-recognizable features -- often referred to as interpretability -- as revealed through the input…