Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Beyond Pixel Norm-Balls: Parametric Adversaries using an Analytically
  Differentiable Renderer   Many machine learning image classifiers are vulnerable to adversarial
attacks, inputs with perturbations designed to intentionally trigger
misclassification. Current adversarial methods directly alter pixel colors and
evaluate against pixel norm-balls: pixel perturbations smaller than a specified
magnitude, according to a measurement norm. This evaluation, however, has
limited practical utility since perturbations in the pixel space do not
correspond to underlying real-world phenomena of image formation that lead to
them and has no security motivation attached. Pixels in natural images are
measurements of light that has interacted with the geometry of a physical
scene. As such, we propose the direct perturbation of physical parameters that
underly image formation: lighting and geometry. As such, we propose a novel
evaluation measure, parametric norm-balls, by directly perturbing physical
parameters that underly image formation. One enabling contribution we present
is a physically-based differentiable renderer that allows us to propagate pixel
gradients to the parametric space of lighting and geometry. Our approach
enables physically-based adversarial attacks, and our differentiable renderer
leverages models from the interactive rendering literature to balance the
performance and accuracy trade-offs necessary for a memory-efficient and
scalable adversarial data augmentation workflow.

36
The categories of this paper are: cmp-lg
21
The categories of this paper are: adap-org
12
The categories of this paper are: nucl-th
24
The categories of this paper are: dg-ga
30
The categories of this paper are: q-alg
28
The categories of this paper are: alg-geom
31
The categories of this paper are: ao-sci
18
The categories of this paper are: econ
29
The categories of this paper are: funct-an
34
The categories of this paper are: chem-ph
9
The categories of this paper are: nlin
11
The categories of this paper are: hep-lat
23
The categories of this paper are: solv-int
19
The categories of this paper are: eess
22
The categories of this paper are: chao-dyn
33
The categories of this paper are: plasm-ph