- Home
- Institute
- People
- Research
- Applications
- Seminars and Events
- Library
- Doctoral Studies
- Jobs
Institute of Computer Science AS CR is a public research organization, which, according to its founding charter does not have a doctoral degree program. The Institute focuses on basic research, however, employs PhD students and post-docs in the areas covered by the research institute.
Several recent studies revealed that some deep networks can be easily fooled by changing an image in a way imperceptible to humans which can cause a deep network to label the image as something else entirely. Thus it is important to investigate robustness of learning of networks with respect to adversarial patterns. The goal of the dissertation is to design a multiobjective algorithm generating imperceptible perturbations of images leading to their misclassifications. Evolutionary algorithms for generation of adversarial patterns will be developed that maximize the error of the model while being as similar to original training patterns as possible. The role of depth of networks and locality properties of computational units in misclassiffication will be analyzed. Methods of making machine learning models more robust to adversarial patterns will be investigated.