Any adversarial attack that sustains after resize attack
BalaMallikarjuna-G opened this issue · 1 comments
BalaMallikarjuna-G commented
Hi Sir,
This is Bala. I have a query regarding adversarial attack.
Is there any adversarial attack that sustains/consists of added noise, after resize attack ? (adversarial image -> converting into High / low resolution image -> resize to original adverarial image size)
Thanks,
Bala
carlini commented
If you use some form of EOT (Athalye et al. 2018) then it should be possible to make resize-robust adversarial examples.