Alexey Kurakin, Ian J. Goodfellow, Samy Bengio. Adversarial examples in the physical world. CoRR abs/1607.02533, 2016.

Kurakin et al. demonstrate that adversarial examples are also a concern in the physical world. Specifically, adversarial examples are crafted digitally and then printed to see if the classification network, running on a smartphone still misclassifies the examples. In many cases, adversarial examples are still able to fool the network, even after printing.

Figure 1: Illustration of the experimental setup.

Also find this summary on ShortScience.org.

What is your opinion on the summarized work? Or do you know related work that is of interest? Let me know your thoughts in the comments below: