Adversarial robustness of VAEs through the lens of local geometry

Asif Khan, Amos Storkey

In an unsupervised attack on variational autoencoders (VAEs), an adversary finds a small perturbation in an input sample that significantly changes its latent space encoding, there…