Example: barber
Practical Black-Box Attacks against Machine Learning
through transformations of the physical tra c sign. Related works showed the feasibility of such physical transformations for a state-of-the-art vision classi er [6] and face recognition model [11]. It is thus conceivable that physical adversarial tra c signs could be generated by maliciously modifying the sign itself, e.g., with stickers or paint.
Download Practical Black-Box Attacks against Machine Learning
Information
Domain:
Source:
Link to this page: