An adversarial attack deliberately alters an input so a machine-learning model produces an incorrect or unreliable result. The changes can be subtle enough to escape ordinary inspection while disrupting the model’s behavior. section 3.4.2
Surveillance-system disruption
Subtle pixel alterations can disrupt a deep-learning surveillance system designed to detect intruders. Creating such attacks may not be straightforward, but the vulnerability raises serious questions for mission-critical uses. section 3.4.2
Adversarial attacks matter because they expose limits in deployment:
- They show that strong performance does not automatically make a deep-learning system trustworthy. section 3.4.2
- They are especially concerning when errors affect safety or high-stakes decisions. section 3.4.2
