a theoretical looks at adversarial examples
play

A THEORETICAL LOOKS AT ADVERSARIAL EXAMPLES Tom Goldstein and also - PowerPoint PPT Presentation

Apr 18, 2023 •20 likes •860 views

A THEORETICAL LOOKS AT ADVERSARIAL EXAMPLES Tom Goldstein and also Ali Shafahi, Ronny Huang, Mahyar Najibi, Octavian Suciu, Christoph Studer, Soheil Feizi, Tudor Dumitras OVERVIEW Why is optimization so easy on neural nets? What are

  1. A THEORETICAL LOOKS AT ADVERSARIAL EXAMPLES Tom Goldstein …and also… Ali Shafahi, Ronny Huang, Mahyar Najibi, Octavian Suciu, Christoph Studer, Soheil Feizi, Tudor Dumitras

  2. OVERVIEW Why is optimization so easy on neural nets? What are adversarial examples, and what are their risks? Poison attacks Are they an escapable problem?

  3. <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> CONVOLUTIONAL NET y x w 1 One’s hot label 0 0 1 0 w i ball car hat grumpy cat f ( x ; w ) → y image weights

  4. <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="UfjSuN0X3dJRIR9aQfKBZasZn34=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPX9bqnsVbwpyDLxc1KGHLVu6afdi1kaoTRMUK1bvpeYTkaV4Uzg2G2nGhPKhrSPLUsljVB3sumpY3JilR4JY2VLGjJV/05kNJ6FAW2M6JmoBe9ifif10pNeNnJuExSg5LNFoWpICYmk79JjytkRowsoUxeythA6oMzYd153bIznD0Fpjm42/mMQyaZxVfK/i356Xq1d5SkU4gmM4BR8uoAo3UIM6MOjDC7zCm/PsvDsfzuesteDkM4cwB+frFxdeluU=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> <latexit sha1_base64="d96mskUPBfSUp9ih23g0ari3WA=">ACAXicbVA9SwNBEJ2LX/H8ilraLAbBKtyJoGXQxjKiSYQkhL3NXLJkb+/Y3VPCkcraVn+Dndj6S/wJ/gs3yRUm8cHA470ZuYFieDaeN63U1hZXVvfKG6W9s7u3ul/YOGjlPFsM5iEauHgGoUXGLdcCPwIVFIo0BgMxheT/zmIyrNY3lvRgl2ItqXPOSMGivdPXV5t1T2Kt4UZJn4OSlDjlq39NPuxSyNUBomqNYt30tMJ6PKcCZw7LZTjQlQ9rHlqWSRqg72fTUMTmxSo+EsbIlDZmqfycyGmk9igLbGVEz0IveRPzPa6UmvOxkXCapQclmi8JUEBOTyd+kxUyI0aWUKa4vZWwAVWUGZuO687tkZxhaK2xzcZfTGKZNM4qvlfxb8/L1as8pSIcwTGcg8XUIUbqEdGPThBV7hzXl23p0P53PWnDymUOYg/P1C3FGlx0=</latexit> CONVOLUTIONAL NET y x w 1 One’s hot label 0 0 1 0 w i ball car hat grumpy cat f ( x ; w ) → y Neural loss function X k f ( x i ; w ) � y i k 2 L ( w ) = min w i Non-convex?

  5. VISUALIZING LOSS FUNCTIONS: FILTER NORMALIZATION Step 1: Find w minimizer 30 million dimensions

  6. VISUALIZING LOSS FUNCTIONS: FILTER NORMALIZATION u v Step 2: Random w directions u, v

  7. VISUALIZING LOSS FUNCTIONS: FILTER NORMALIZATION u v Step 3: u i u i · k w i k Filter w k u i k normalization Li, Xu, Taylor, Studer, G. “Visualizing the loss landscape of neural nets.”

  8. VISUALIZING LOSS FUNCTIONS: FILTER NORMALIZATION u v Step 4 Plot Li, Xu, Taylor, Studer, G. “Visualizing the loss landscape of neural nets.”

  9. 56 LAYER “VGG” NET CIFAR-10

  10. 56 LAYER NEURAL NET CIFAR-10

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Adversarial Examples Hanxiao Liu April 2, 2018 1 / 22 Adversarial Examples Inputs to ML

Adversarial Examples Hanxiao Liu April 2, 2018 1 / 22 Adversarial Examples Inputs to ML

Adversarial Examples Hanxiao Liu April 2, 2018 1 / 22 Adversarial Examples Inputs to ML models that an attacker has intentionally designed to cause the model to make a mistake 1 Why this is interesting: Safety. Interpretability.

881 views • 22 slides
Adversarial Examples and Adversarial Training Ian Goodfellow, Sta ff Research Scientist, Google

Adversarial Examples and Adversarial Training Ian Goodfellow, Sta ff Research Scientist, Google

Adversarial Examples and Adversarial Training Ian Goodfellow, Sta ff Research Scientist, Google Brain CS 231n, Stanford University, 2017-05-30 Overview What are adversarial examples? Why do they happen? How can they be used to

866 views • 43 slides
A Closer Look at Adversarial Examples for Separated Data Kamalika Chaudhuri University of

A Closer Look at Adversarial Examples for Separated Data Kamalika Chaudhuri University of

A Closer Look at Adversarial Examples for Separated Data Kamalika Chaudhuri University of California, San Diego Adversarial Examples Gibbon Panda Small perturbation to legitimate inputs causing misclassification Adversarial Examples Can

1.41k views • 42 slides
Synthesizing Robust Adversarial Examples Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin

Synthesizing Robust Adversarial Examples Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin

Synthesizing Robust Adversarial Examples Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin Kwok Adversarial examples Adversarial examples Imperceptible perturbations to an input can change a neural network's prediction adversarial

1.06k views • 23 slides
Thermometer Encoding: One Hot Way to Resist Adversarial Examples Stanford, 2017-11-16 Aurko Roy*

Thermometer Encoding: One Hot Way to Resist Adversarial Examples Stanford, 2017-11-16 Aurko Roy*

Thermometer Encoding: One Hot Way to Resist Adversarial Examples Stanford, 2017-11-16 Aurko Roy* Colin Ra ff el Jacob Ian Buckman* Goodfellow *joint first author Adversarial Examples Adversarial Definitely Probably panda perturbation

607 views • 15 slides
Adversarial Examples in NLP Sameer Singh sameer@uci.edu @sameer_ sameersingh.org What are

Adversarial Examples in NLP Sameer Singh sameer@uci.edu @sameer_ sameersingh.org What are

Slides: http://tiny.cc/adversarial Adversarial Examples in NLP Sameer Singh sameer@uci.edu @sameer_ sameersingh.org What are Adversarial Examples? panda gibbon 57.7% confidence 99.3% confidence [Goodfellow et al, ICLR 2015 ]

1.56k views • 43 slides
? AdVersarial: Defeating Perceptual Ad Blocking with Adversarial Examples Florian Tramr

? AdVersarial: Defeating Perceptual Ad Blocking with Adversarial Examples Florian Tramr

Todays Story: How I got my first Death Threat ? AdVersarial: Defeating Perceptual Ad Blocking with Adversarial Examples Florian Tramr October 8 th 2019 Joint work with Pascal Dupr, Gili Rusak, Giancarlo Pellegrino and Dan Boneh The

415 views • 29 slides
Explaining and Harnessing Adversarial Examples Ian J. Goodfellow, Jonathon Shlens, &amp;

Explaining and Harnessing Adversarial Examples Ian J. Goodfellow, Jonathon Shlens, &amp;

Explaining and Harnessing Adversarial Examples Ian J. Goodfellow, Jonathon Shlens, &amp; Christian Szegedy Presented by - Kawin Ethayarajh and Abhishek Tiwari Introduction - adversarial examples : Inputs formed by applying small but

1.49k views • 103 slides
Neglected topics CS 446 Adversarial examples and deep networks 1 / 23 Adversarial

Neglected topics CS 446 Adversarial examples and deep networks 1 / 23 Adversarial

Neglected topics CS 446 Adversarial examples and deep networks 1 / 23 Adversarial examples? Standard ML setup: We have training data; try to do well on withheld testing data. Adversarial/robust ML setup: We have training

672 views • 27 slides
Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Security

Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Security

Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Security Seminar, Stanford University, 2017-01-17 In this presentation Intriguing Properties of Neural Networks Szegedy et al, 2013

939 views • 44 slides
Physical Adversarial Examples Alex Kurakin Ian Goodfellow Output STOP Machine Learning

Physical Adversarial Examples Alex Kurakin Ian Goodfellow Output STOP Machine Learning

Physical Adversarial Examples Alex Kurakin Ian Goodfellow Output STOP Machine Learning Training Examples Hidden units / BICYCLE features CAR PEDESTRIA N Parameters Input ImageNet (Russakovsky et al 2015) Adversarial Examples: Images

369 views • 19 slides
On the Defense Against Adversarial Examples Beyond the Visible Spectrum Anthony Ortiz 1 , Olac

On the Defense Against Adversarial Examples Beyond the Visible Spectrum Anthony Ortiz 1 , Olac

On the Defense Against Adversarial Examples Beyond the Visible Spectrum Anthony Ortiz 1 , Olac Fuentes 1 , Dalton Rosario 2 , Christopher Kiekintveld 1 1 Department of Computer Science, UTEP 2 US Army Research Laboratory Adversarial Examples on

460 views • 19 slides
Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Guest

Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Guest

Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Guest lecture for CS 294-131, UC Berkeley, 2016-10-05 In this presentation Intriguing Properties of Neural Networks Szegedy et al, 2013

660 views • 44 slides
Synthesizing Robust Adversarial Examples Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin

Synthesizing Robust Adversarial Examples Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin

Synthesizing Robust Adversarial Examples Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin Kwok Standard Adversarial Examples Given image x ; target class y Maximize with projected gradient descent: Standard Adversarial Examples Standard

560 views • 15 slides
Adversarial Examples and Adversarial Training Innova&amp;ve Technology Leader program January 22

Adversarial Examples and Adversarial Training Innova&amp;ve Technology Leader program January 22

Adversarial Examples and Adversarial Training Innova&amp;ve Technology Leader program January 22 nd 2018 Florian Tramr Stanford Deep Learning is Super Smart! 2 Is it really? + . 007 = Im sure this Im certain this is a panda is

452 views • 12 slides
Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist

Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist

Adversarial Examples and Adversarial Training Ian Goodfellow, OpenAI Research Scientist Presentation at San Francisco AI Meetup, 2016-08-18 In this presentation Intriguing Properties of Neural Networks Szegedy et al, 2013

690 views • 32 slides
The Tobacco Industry, Tobacco Control &amp; Media 2.0: Same Poison, New Bottle Stan Shatenstein

The Tobacco Industry, Tobacco Control &amp; Media 2.0: Same Poison, New Bottle Stan Shatenstein

The Tobacco Industry, Tobacco Control &amp; Media 2.0: Same Poison, New Bottle Stan Shatenstein Editor &amp; Publisher, STAN Bulletin Smoking &amp; Tobacco Abstracts &amp; News shatensteins@sympatico.ca TI Marketing: Media 1.0 TI Marketing:

789 views • 30 slides
T argeted attacks: from being a victim to counter attacking Andrzej Dereszowski deresz

T argeted attacks: from being a victim to counter attacking Andrzej Dereszowski deresz

T argeted attacks: from being a victim to counter attacking Andrzej Dereszowski deresz &lt;at&gt; signal11.eu www.signal11.eu Motivation Are we able to counteratack ? Different possibilities: Traditional network scan and attack

1.02k views • 52 slides
METAPOISON: LEARNING TO CRAFT POISON W. Ronny Huang,* Jonas Geiping,* Liam Fowl,^ Tom Goldstein

METAPOISON: LEARNING TO CRAFT POISON W. Ronny Huang,* Jonas Geiping,* Liam Fowl,^ Tom Goldstein

METAPOISON: LEARNING TO CRAFT POISON W. Ronny Huang,* Jonas Geiping,* Liam Fowl,^ Tom Goldstein *Equal Contribution ^Speaker University of Maryland NeurIPS MetaLearn 2019 DATA POISONING Training data Testing example Plane Frog Base

251 views • 11 slides
Causal Theory of Intention Phil 255 David Armstrong Armstrong begins with some meta - philosophy:

Causal Theory of Intention Phil 255 David Armstrong Armstrong begins with some meta - philosophy:

Causal Theory of Intention Phil 255 David Armstrong Armstrong begins with some meta - philosophy: Logical positivists generated a crisis in philosophy: Wittgenstein: role for philosophy was to clarify problems Ryle: philosophers were to perform

273 views • 14 slides
The Limitations of Federated Learning in Sybil Settings Clement Fung*, Chris J.M. Yoon + , Ivan

The Limitations of Federated Learning in Sybil Settings Clement Fung*, Chris J.M. Yoon + , Ivan

The Limitations of Federated Learning in Sybil Settings Clement Fung*, Chris J.M. Yoon + , Ivan Beschastnikh + * Carnegie Mellon University + University of British Columbia The evolution of machine learning at scale Machine learning (ML) is a

723 views • 55 slides
CS7038 - Malware Analysis - Wk02.2 Attack Introduction Coleman Kane kaneca@mail.uc.edu January

CS7038 - Malware Analysis - Wk02.2 Attack Introduction Coleman Kane kaneca@mail.uc.edu January

CS7038 - Malware Analysis - Wk02.2 Attack Introduction Coleman Kane kaneca@mail.uc.edu January 18, 2018 Content This lecture covers the following concepts: Demo setting up specific lab environments in VirtualBox Utilizing

393 views • 11 slides
Chapter 3 Instruction-Level Parallelism and its Exploitation (Part 3) ILP vs. Parallel

Chapter 3 Instruction-Level Parallelism and its Exploitation (Part 3) ILP vs. Parallel

Chapter 3 Instruction-Level Parallelism and its Exploitation (Part 3) ILP vs. Parallel Computers Dynamic Scheduling (Section 3.4, 3.5) Dynamic Branch Prediction (Section 3.3, 3.9, and Appendix C) Hardware Speculation and Precise Interrupts

733 views • 24 slides
KernelAddressSanitizer (KASan) a fast memory error detector for the Linux kernel Andrey Konovalov

KernelAddressSanitizer (KASan) a fast memory error detector for the Linux kernel Andrey Konovalov

KernelAddressSanitizer (KASan) a fast memory error detector for the Linux kernel Andrey Konovalov &lt;andreyknvl@google.com&gt;, Google Dmitry Vyukov &lt;dvyukov@google.com&gt;, Google LinuxCon North America 2015 July 18th 2015 Agenda

1.1k views • 49 slides

More recommend