Anouar Ben Khalifa

Jedi: Entropy-Based Localization and Removal of Adversarial Patches

Real-world adversarial physical patches were recently shown to be successful in compromising state-of-the-art models in a variety of computer vision applications. The most promising defenses that are based on either input gradient or features analyses have been shown to be compromised by recent GAN-…