Concept-based Adversarial Attacks: Tricking Humans and Classifiers Alike

Johannes Schneider, Giovanni Apruzzese

We propose to generate adversarial samples by modifying activations of upper layers encoding semantically meaningful concepts. The original sample is shifted towards a target sampl…