Zachary J Golan-Strieb

Demystifying the Adversarial Robustness of Random Transformation Defenses

Neural networks’ lack of robustness against attacks raises concerns in security-sensitive settings such as autonomous vehicles. While many countermeasures may look promising, only a few withstand rigorous evaluation. Defenses using random transformations (RT) have shown impressive results, particula…