Local Convolutions Cause an Implicit Bias towards High Frequency Adversarial Examples

Josue Ortega Caro, Yilong Ju, Ryan Pyle +4

Adversarial Attacks are still a significant challenge for neural networks. Recent work has shown that adversarial perturbations typically contain high-frequency features, but the r…