So I did some preliminary testing with CapsNet, and it seems that while it was harder than all the other CNNs to find adversarial pixels to fool the network, it was still vulnerable to attack. See the README for…
Author of the repo here. I'm training a capsule network right now, will report back on results in the README in 24-48 hours. My hypothesis is that capsule networks are vulnerable as well, but we'll see by how much.
The authors of the paper have successfully conducted the attack on 227*227 images as well. The pixels are much harder to see with the human eye. It seems that larger images increase the search space as a linear function…
So I did some preliminary testing with CapsNet, and it seems that while it was harder than all the other CNNs to find adversarial pixels to fool the network, it was still vulnerable to attack. See the README for…
Author of the repo here. I'm training a capsule network right now, will report back on results in the README in 24-48 hours. My hypothesis is that capsule networks are vulnerable as well, but we'll see by how much.
The authors of the paper have successfully conducted the attack on 227*227 images as well. The pixels are much harder to see with the human eye. It seems that larger images increase the search space as a linear function…