~/talk

Tensorflow, there is no spoon

Talkat DevFest Lille 2019 · on Friday, 2019-06-14· [machine-learning, security]
slides:none on file

Shows how to craft adversarial images that flip labels on real models: the 2016 Google example turns a panda into a gibbon at 99.3% confidence, AlexNet gets many images labeled ostrich, and a 3D‑printed perturbed turtle is classified as a rifle. Uses gradient steps against Inception v3 to push a cat image until the model is 98% confident it’s a spoon, and reproduces physical attacks with 3D-printed adversarial glasses. Defense is practical: augment training with adversarial examples or use GANs to harden models.

AI-written summary · about

  1. 0:00Start
  2. 11:51How Neural Network Works
  3. 12:28How a Neural Network Works
  4. 13:54Calculation for the First Neuron in the First Hand Layer
  5. 21:33Inception V3
  6. 22:27Guinea Pig
  7. 24:49Gradient Descent
  8. 26:59Results
  9. 30:18Protect Your Model against Attacks
  10. 42:54Optical Illusions
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.