LaVAN: Localized and Visible Adversarial NoiseLaVAN: Localized and Visible Adversarial NoiseKarmon, Danny and Zoran, Daniel and Goldberg, Yoav2018
Paper summarydavidstutzKarmon et al. propose a gradient-descent based method for obtaining adversarial patch like localized adversarial examples. In particular, after selecting a region of the image to be modified, several iterations of gradient descent are run in order to maximize the probability of the target class and simultaneously minimize the probability in the true class. After each iteration, the perturbation is masked to the patch and projected onto the valid range of [0,1] for images. On ImageNet, the authors show that these adversarial examples are effective against a normal, undefended network.
Also find this summary at [davidstutz.de](https://davidstutz.de/category/reading/).
Karmon et al. propose a gradient-descent based method for obtaining adversarial patch like localized adversarial examples. In particular, after selecting a region of the image to be modified, several iterations of gradient descent are run in order to maximize the probability of the target class and simultaneously minimize the probability in the true class. After each iteration, the perturbation is masked to the patch and projected onto the valid range of [0,1] for images. On ImageNet, the authors show that these adversarial examples are effective against a normal, undefended network.
Also find this summary at [davidstutz.de](https://davidstutz.de/category/reading/).