Impact of Spatial Frequency Based Constraints on Adversarial Robustness

Rémi Bernhard, Pierre-Alain Moellic, Martial Mermillod +4

Adversarial examples mainly exploit changes to input pixels to which humans are not sensitive to, and arise from the fact that models make decisions based on uninterpretable featur…