Pith. sign in

REVIEW 2 cited by

Adversarial Examples for Semantic Image Segmentation

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 1703.01101 v1 pith:HLKKBM75 submitted 2017-03-03 stat.ML cs.CRcs.CVcs.LGcs.NE

classification stat.MLcs.CRcs.CVcs.LGcs.NE
keywords adversarialperturbationsclassdeepnetworksegmentationsemantictask
verification ladder T0 review T1 audit T2 compute T3 formal

Signed reviews

No signed human review yet.

0 comments
read the original abstract

Machine learning methods in general and Deep Neural Networks in particular have shown to be vulnerable to adversarial perturbations. So far this phenomenon has mainly been studied in the context of whole-image classification. In this contribution, we analyse how adversarial perturbations can affect the task of semantic segmentation. We show how existing adversarial attackers can be transferred to this task and that it is possible to create imperceptible adversarial perturbations that lead a deep network to misclassify almost all pixels of a chosen class while leaving network prediction nearly unchanged outside this class.

Discussion (0). Continue with ORCID to comment.

Forward citations

Cited by 2 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. On the Robustness of Human Pose Estimation

    cs.CV 2019-08 conditional novelty 6.0 of 10

    Human pose estimation models are relatively robust to single-step attacks, but heatmap-based and structure-aware models resist attacks better than direct-regression models, and universal perturbations can still break them.

  2. Universal, transferable and targeted adversarial attacks

    cs.LG 2019-08 reject novelty 5.0 of 10

    A trained encoder-decoder network (FTN) transforms source images into targeted adversarial examples that reportedly transfer across VGG19, Inception-v3, ResNet variants, DenseNet, and a black-box commercial classifier...

Pith tools