1, Universal adversarial perturbations AlhusseinFawzi JointworkwithSeyedMoosavi,OmarFawzi,andPascalFrossard CVPR2017,Honolulu,Hawaii 22July2017 CVPR2017 EPFL,ENSLyon 2, Recent advances in image classification [He et. al., ICCV 2015] CVPR2017 EPFL,ENSLyon • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] • Broadrangeofperturbations 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. CVPR2017 EPFL,ENSLyon • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] • Broadrangeofperturbations 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. Lampshade CVPR2017 EPFL,ENSLyon • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] • Broadrangeofperturbations 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. Perturbation Lampshade CVPR2017 EPFL,ENSLyon • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] • Broadrangeofperturbations 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. Perturbation Lampshade CVPR2017 EPFL,ENSLyon • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] • Broadrangeofperturbations 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. Perturbation f Lampshade CVPR2017 EPFL,ENSLyon • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] • Broadrangeofperturbations 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. Perturbation f Lampshade? Lampshade CVPR2017 EPFL,ENSLyon 3, Robustness of classifiers to perturbations • Inrealworldenvironments,imagesundergoperturbations. Perturbation f Lampshade? Lampshade • Broadrangeofperturbations • Adversarialperturbations [Szegedyet.al.ICLR2014],[Biggioet.al.,PKDD2013],[Goodfellow et.al.,ICLR2015],[Moosaviet.al.,CVPR2016],[Rozsaetal,CVPRW2016],[Sabouret.al.,ICLR2016],... • Randomnoise [Szegedyet.al.ICLR2014],[Fawziet.al.,NIPS2016],... • Structurednuisances(geometrictransformations [Brunaet.al.,TPAMI2013], ,occlusions ,etc...). [Jaderberget.al.,NIPS2015] [Sharifet.al.,CCS2016] CVPR2017 EPFL,ENSLyon 4, Universal perturbations CVPR2017 EPFL,ENSLyon