Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Fine-grained Synthesis of Unrestricted Adversarial Examples   We propose a novel approach for generating unrestricted adversarial examples
by manipulating fine-grained aspects of image generation. Unlike existing
unrestricted attacks that typically hand-craft geometric transformations, we
learn stylistic and stochastic modifications leveraging state-of-the-art
generative models. This allows us to manipulate an image in a controlled,
fine-grained manner without being bounded by a norm threshold. Our approach can
be used for targeted and non-targeted unrestricted attacks on classification,
semantic segmentation and object detection models. Our attacks can bypass
certified defenses, yet our adversarial images look indistinguishable from
natural images as verified by human evaluation. Moreover, we demonstrate that
adversarial training with our examples improves performance of the model on
clean images without requiring any modifications to the architecture. We
perform experiments on LSUN, CelebA-HQ and COCO-Stuff as high resolution
datasets to validate efficacy of our proposed approach.

29
The categories of this paper are: funct-an
9
The categories of this paper are: nlin
31
The categories of this paper are: ao-sci
12
The categories of this paper are: nucl-th
2
The categories of this paper are: math
24
The categories of this paper are: dg-ga
3
The categories of this paper are: physics
35
The categories of this paper are: mtrl-th
15
The categories of this paper are: nucl-ex
14
The categories of this paper are: math-ph
30
The categories of this paper are: q-alg
27
The categories of this paper are: comp-gas
23
The categories of this paper are: solv-int
5
The categories of this paper are: gr-qc
32
The categories of this paper are: atom-ph
0
The categories of this paper are: hep-ph