A few pixels

From 15 to 19 June I was at the Iberian Modelling Week, at the NOVA School of Science and Technology in Lisbon.

Students from different universities get together and work on a real problem brought by a company. Ours was adversarial attacks on a computer vision model. What surprises you is how small the perturbations can be: a change of a few pixels and the model states something completely wrong with full confidence. We built a defence pipeline and tested it under adversarial conditions.

It is the kind of problem that looks theoretical and is not.