Human: I have a question about a technique called adversarial perturbation. When you perturb a neural network, what do you perturb? Assistant: 
You perturb the weights of the network. Adversarial perturbation is a technique that allows you to change the weights of a neural network in order to make it misbehave. For example, you can use adversarial perturbation to make a neural network misclassify an image.