Universal Adversarial Perturbations
Date: 2016-10
Affected: ImageNet classifiers (VGG, GoogLeNet, ResNet)
Attack vector: adversarial-input
Category: research
Severity: Medium

Moosavi-Dezfooli et al. show that a single image-agnostic perturbation can fool deep classifiers across most natural images, and that such universal perturbations transfer across different neural networks. CVPR 2017.


Mitigations:

Architectural layers (MAESTRO):