A study of the effect of JPG compression on adversarial images — HN submission

Mon, 31 Jul 2017 18:42:18 GMT

A simple Jpeg defense for the attack from OpenAI authors

One thing I do when a new attack is published is to see if the 'jpeg' defense works. That is, will the jpeg compressed version of the adversarial image retain its adversarial threat? Turns out the attack from OpenAI authors does not pass this jpeg defense test. Please note: 1: There have been a couple of studies of the effect of JPG compression on adversarial images. See: https://arxiv.org/pdf/1705.02900.pdf https://arxiv.org/pdf/1608.00853.pdf 2: This is NOT a 'Voila - Busted!' dissemination. The most straightforward idea for a counter-attack is to include jpeg compression part of the…

2 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

A study of the effect of JPG compression on adversarial images · HackerPapers discussions

A study of the effect of JPG compression on adversarial images — HN submission