A New Kind of Adversarial Example: Measuring the Human-Model Gap, and Its Relationship to OOD Detection

Ali Borji

Almost all adversarial attacks add an imperceptible perturbation to fool a model. We instead study the opposite: a large, clearly visible perturbation that causes the model to keep…