Apurv Gupta

Batchnorm Allows Unsupervised Radial Attacks

The construction of adversarial examples usually requires the existence of soft or hard labels for each instance, with respect to which a loss gradient provides the signal for construction of the example. We show that for batch normalized deep image recognition architectures, intermediate latents th…