MamaPearl commited on
Commit
603d061
·
verified ·
1 Parent(s): 36f17a6

Update README.md

Browse files
Files changed (1) hide show
  1. README.md +8 -6
README.md CHANGED
@@ -19,17 +19,19 @@ Anti-aliased residual CNN for CIFAR-10 image classification, designed to improve
19
 
20
  ## Problem
21
 
22
- Downsampling operations are linear maps from a high-dimensional space to a lower-dimensional one.
23
 
 
 
 
 
 
24
 
25
  $D : \mathbb{R}^n \to \mathbb{R}^m, \quad \text{where } n > m$
 
26
  $\dim(\ker(D)) = n - \text{rank}(D)$
27
 
28
-
29
- By the Rank-Nullity thereom, this matrix has a massive NULL space. An attacker can exploit this.
30
- They can use the discarded samples of these downsampling operations as extra degrees of freedom.
31
- By sculpting perturbations with components in the null space of the downsampling operator,
32
- they spread energy across frequencies that are discarded during striding
33
 
34
  The result is an image perceptually identical to the original, with a manipulated activation pattern.
35
 
 
19
 
20
  ## Problem
21
 
22
+ ### NULA
23
 
24
+ Anti-aliased residual CNN for CIFAR-10 image classification, designed to improve robustness against perturbations that exploit downsampling.
25
+
26
+ ### Problem
27
+
28
+ Downsampling operations are linear maps from a high-dimensional space to a lower-dimensional one.
29
 
30
  $D : \mathbb{R}^n \to \mathbb{R}^m, \quad \text{where } n > m$
31
+
32
  $\dim(\ker(D)) = n - \text{rank}(D)$
33
 
34
+ By the Rank-Nullity theorem, this matrix has a massive NULL space. An attacker can exploit this. They can use the discarded samples of these downsampling operations as extra degrees of freedom. By sculpting perturbations with components in the null space of the downsampling operator, they spread energy across frequencies that are discarded during striding.
 
 
 
 
35
 
36
  The result is an image perceptually identical to the original, with a manipulated activation pattern.
37