Content-Adaptive Pixel Discretization to Improve Model Robustness

Ryan Feng, Wu-chi Feng, Atul Prakash

Preprocessing defenses such as pixel discretization are appealing to remove adversarial attacks due to their simplicity. However, they have been shown to be ineffective except on s…