Locally optimal detection of stochastic targeted universal adversarial perturbations

Amish Goel, Pierre Moulin

Deep learning image classifiers are known to be vulnerable to small adversarial perturbations of input images. In this paper, we derive the locally optimal generalized likelihood r…