K Venkata Subrahmanyam

Can we have it all? On the Trade-off between Spatial and Adversarial Robustness of Neural Networks

(Non-)robustness of neural networks to small, adversarial pixel-wise perturbations, and as more recently shown, to even random spatial transformations (e.g., translations, rotations) entreats both theoretical and empirical understanding. Spatial robustness to random translations and rotations is com…