UPSET and ANGRI : Breaking High Performance Image Classifiers

• DOI: 10.48550/arxiv.1707.01159
• Publication Date: 2017-01-01
• Authors: Sarkar, Sayantan; Bansal, Ankan; Mahbub, Upal; Chellappa, Rama
• Keywords: FOS: Computer and information sciences; Computer Vision and Pattern Recognition (cs.CV); Computer Science - Computer Vision and Pattern Recognition; 0202 electrical engineering, electronic engineering, information engineering; 02 engineering and technology

In this paper, targeted fooling of high performance image classifiers is achieved by developing two novel attack methods. The first method generates universal perturbations for target classes and the second generates image specific perturbations. Extensive experiments are conducted on MNIST and CIFAR10 datasets to provide insights about the proposed algorithms and show their effectiveness.