{"id":"W2963068442","doi":"10.1109/cvpr.2019.00443","title":"Adversarial Attacks Beyond the Image Space","year":2019,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":140,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Rendering (computer graphics); Computer science; Artificial intelligence; Differentiable function; Adversarial system; Pixel; Computer vision; Space (punctuation); Artificial neural network; Image (mathematics); Image translation; Translation (biology); Mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["insufficient_payload"],"consensus_categories":[],"category_scores_codex":[0.0004694899,0.0001445709,0.0001393672,0.00004748131,0.0001677685,0.0002210402,0.001588479,0.00006060618,0.0006003521],"category_scores_gemma":[0.00009724296,0.00009366262,0.00008310744,0.0003178345,0.00006158531,0.000727922,0.0007900054,0.0003392751,0.001999991],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00003748796,"about_ca_system_score_gemma":0.00006240398,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00007099975,"about_ca_topic_score_gemma":0.00000618491,"domain_scores_codex":[0.9986716,0.0001186853,0.0001506105,0.0003842119,0.0003577044,0.0003172243],"domain_scores_gemma":[0.9985722,0.0002749336,0.00008145072,0.0009568704,0.00005534598,0.00005921241],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002164451,0.00003623217,0.003856822,0.00001163495,0.00004133288,0.00002131784,0.001615619,0.01337963,0.002264278,0.9493154,0.0197531,0.009683012],"study_design_scores_gemma":[0.00220834,0.0001777635,0.005470159,0.00001609232,0.00002300365,0.00004994484,0.0005633004,0.830013,0.002081234,0.01742371,0.141158,0.0008154817],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.009417992,0.00001595713,0.8014692,0.008514239,0.001892766,0.0002265579,3.90348e-7,0.000263271,0.1781996],"genre_scores_gemma":[0.8342583,0.000002731673,0.1479882,0.00156865,0.0004018138,0.000006409264,0.000001763816,0.00002046951,0.01575163],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9318917,"threshold_uncertainty_score":0.9987771,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.004341876323211905,"score_gpt":0.2323319089576488,"score_spread":0.2279900326344369,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}