I never understood the whole notion of attacks on deep-learning systems and all the research effort spent on defending against such attacks. After all, we're talking about systems that are brittle in the face of non-adversarial non-attacks, e.g. http://news.mit.edu/2019/object-recognition-dataset-stumped-....
The language of attacks and defenses implies that we are approaching the kind of robustness that we expect from say a bank app, when in fact we are lightyears away from that.
The language of attacks and defenses implies that we are approaching the kind of robustness that we expect from say a bank app, when in fact we are lightyears away from that.