2018/08/27 by Roberto Rey-de-Castro, Herschel Rabitz, Rey-de-Castro, Roberto +1
Computer Science · #Adversarial Robustness in Machine Learning #Anomaly Detection Techniques and Applications #Computer Vision and Pattern Recognition (cs.CV) #FOS: Computer and information sciences #Generative Adversarial Networks and Image Synthesis #cs.CV
paper · pdf · doi:10.48550/arxiv.1809.00958
Code and data available at: https://github.com/roberto1648/adversarial-perturbations-on-images-and-videos
arxiv created 2018/08/27 · openalex publication_date 2018/08/27 · arxiv updated 2018/09/05 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
We introduce a method for learning adversarial perturbations targeted to individual images or videos. The learned perturbations are found to be sparse while at the same time containing a high level of feature detail. Thus, the extracted perturbations allow a form of object or action recognition and provide insights into what features the studied deep neural network models consider important when reaching their classification decisions. From an adversarial point of view, the sparse perturbations successfully confused the models into misclassifying, although the perturbed samples still belonged to the same original class by visual examination. This is discussed in terms of a prospective data augmentation scheme. The sparse yet high-quality perturbations may also be leveraged for image or video compression.