鲁棒对抗输入:多视角欺骗神经网络
对AI安全研究和自动驾驶系统开发者极具警示意义,表明多模态感知并非对抗防御的万能药。
OpenAI创建了能在不同尺度和视角下可靠欺骗神经网络分类器的图像,挑战了之前认为多视角采集使自动驾驶难以被恶意攻击的观点。这些对抗性输入可在物理世界稳定生效,揭示了现有视觉模型的脆弱性。
This report is categorized under AITOP's "Papers" desk. Key entities and technical topics under continuous tracking include adversarial-attacks, robustness, computer-vision, autonomous-driving.
Primary source verification: published directly by OpenAI Blog with first-party authority.