Adversarial testing · Question 55 of 60
A traffic sign recognizer misclassifies a stop sign after a few pixels, barely visible to humans, were changed. Which statements are correct?
2 answers are correct. Hard
Show answer
Answer
- B The modified image is an adversarial example
- D Such findings should be used to incorporate safeguards and make the model more robust
Explanation
Adversarial examples are slightly modified versions of legitimate inputs whose perturbations are often imperceptible to humans and that cause the model to misclassify them. Identified vulnerabilities serve to incorporate safeguards. Adversarial examples can occur accidentally or be used maliciously in attacks.