Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Adversarial Reprogramming of Neural Networks   Deep neural networks are susceptible to \emph{adversarial} attacks. In
computer vision, well-crafted perturbations to images can cause neural networks
to make mistakes such as confusing a cat with a computer. Previous adversarial
attacks have been designed to degrade performance of models or cause machine
learning models to produce specific outputs chosen ahead of time by the
attacker. We introduce attacks that instead {\em reprogram} the target model to
perform a task chosen by the attacker---without the attacker needing to specify
or compute the desired output for each test-time input. This attack finds a
single adversarial perturbation, that can be added to all test-time inputs to a
machine learning model in order to cause the model to perform a task chosen by
the adversary---even if the model was not trained to do this task. These
perturbations can thus be considered a program for the new task. We demonstrate
adversarial reprogramming on six ImageNet classification models, repurposing
these models to perform a counting task, as well as classification tasks:
classification of MNIST and CIFAR-10 examples presented as inputs to the
ImageNet model.

3
The categories of this paper are: physics
23
The categories of this paper are: solv-int
18
The categories of this paper are: econ
10
The categories of this paper are: q-bio
29
The categories of this paper are: funct-an
33
The categories of this paper are: plasm-ph
34
The categories of this paper are: chem-ph
6
The categories of this paper are: astro-ph
7
The categories of this paper are: hep-th
26
The categories of this paper are: bayes-an
25
The categories of this paper are: patt-sol
31
The categories of this paper are: ao-sci
27
The categories of this paper are: comp-gas
37
The categories of this paper are: supr-con
2
The categories of this paper are: math
15
The categories of this paper are: nucl-ex