Year: 2016
Type: preprint
Abstract: We show that defensive distillation is not secure: it is no more resistant to targeted misclassification attacks than unprotected neural networks.
Source: arXiv (Cornell University)
Authors: Carlini, Nicholas, Wagner, David
Institution: University of California, Berkeley
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W2517229335