A Mimetic Detector for Adversarial Image Perturbations

Johnny Corbino

Adversarial attacks fool deep image classifiers by adding tiny, almost invisible noise patterns to a clean image. The standard ${\ell }^{\infty }$-bounded attacks (FGSM and PGD) produce…