Adversarial Patch
Date: 2017-12
Affected: VGG16, ImageNet classifiers
Attack vector: adversarial-input
Category: research
Severity: High

Brown et al. craft printable, image-agnostic patches that, when placed in a scene, force classifiers to output a target class with near-100 percent confidence (e.g., banana -> toaster). NIPS 2017 workshop.


Mitigations:

Architectural layers (MAESTRO):