“Focusing only on defending against small perturbations is insufficient, as large, local perturbations can also break…
“Focusing only on defending against small perturbations is insufficient, as large, local perturbations can also break classifiers.”
https://techcrunch.com/2018/01/02/these-psychedelic-stickers-blow-ai-minds/