29 lines
838 B
TeX
29 lines
838 B
TeX
|
\begin{frame}
|
||
|
|
\frametitle{Topic 2: Adversarial Examples}
|
||
|
|
|
||
|
|
\Large \textbf{Practical Black-Box Attacks against Machine Learning} (Papernot, McDaniel, et al., 2016)\\
|
||
|
|
\LARGE \textbf{Chapter:} 10.4 \textbf{Supervisor:} Benedikt Böing (benedikt.böing@cs.uni-dortmund.de)\\
|
||
|
|
|
||
|
|
%\begin{center}
|
||
|
|
%\includegraphics[height=3cm]{illustrations/benedikt.png}
|
||
|
|
%\end{center}
|
||
|
|
|
||
|
|
\begin{columns}
|
||
|
|
\begin{column}{.575\textwidth}
|
||
|
|
\begin{center}
|
||
|
|
\includegraphics[height=3cm]{illustrations/benedikt.png}
|
||
|
|
\end{center}
|
||
|
|
\end{column}
|
||
|
|
\begin{column}{.375\textwidth}
|
||
|
|
\begin{itemize}
|
||
|
|
\item Slight changes in a neural network can change its output drastically
|
||
|
|
|
||
|
|
\end{itemize}
|
||
|
|
|
||
|
|
\end{column}
|
||
|
|
\end{columns}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
\end{frame}
|