Defending Against Universal Attacks Through Selective Feature Regeneration

Tejas Borkar, Felix Heide, Lina Karam

Deep neural network (DNN) predictions have been shown to be vulnerable to carefully crafted adversarial perturbations. Specifically, image-agnostic (universal adversarial) perturba…