Machine Learning, Artificial Intelligence, Neural Networks.
Figure 1. Almost all existing gradient-based adversarial attacks start close to the clean image (say again the frog image) and use the gradient to find the closest image for which the decision is changed (say to crocodile). Picture of frog-crocodile hybrid: worth1000.com. Our new class of attacks