The Human Visual System and Adversarial AI
This paper introduces existing research about the Human Visual System into Adversarial AI. To date, Adversarial AI has modeled differences between clean and adversarial examples of images using L1, L2, L0, and L-infinity norms. These norms have the benefit of easy mathematical explanation and distinctive visual representations when applied to images in the context of Adversarial AI. However, in prior decades, other existing areas of image processing have moved beyond easy mathematical models like Mean Squared Error (MSE) towards models that factor in more understanding of the Human Visual System (HVS). We demonstrate a proof of concept of incorporating HVS into Adversarial AI, and hope to spark more research into incorporating HVS into Adversarial AI.
READ FULL TEXT