#MBDL)BUͰ࿩୊ʹͳͬͨ (ZPJ5IPOΛ࢖ͬͯΈͨʂ 2018/11/10 
 ͢ΈͩηΩϡϦςΟษڧձ 
 @saiyuki1919

໨࣍ #MBDL)BU4FTTJPOT (ZPJ5IPOͱ͸ (ZPJ5IPOͷ࢓૊Έ (ZPJ5IPO࣮ߦ ࢖ͬͯΈ͍͚ͨͲɻɻɹ ·ͱΊ ʲ൪֎ฤᶃʳ%FFQ&YQMPJUʹ͍ͭͯ ʲ൪֎ฤᶄʳ"EWFSTBSJ3PCVTUOFTT5PPMCPYʹ͍ͭͯ

#MBDL)BU4FTTJPOT ࢀߟจݙɿ
 IUUQTXXXCMBDLIBUDPNVTBSTFOBMTDIFEVMF

ؾʹͳͬͨηογϣϯ w (ZPJ5IPO "4*" 
 .BDIJOF-FBSOJOHΛར༻ͨ͠ϖωτϨʔγϣϯπʔϧ w %FFQ&YQMPJU 64" 
 .FUBTQMPJUΛར༻ͨ͠׬શࣗಈԽ͞Εͨ৵ೖςετπʔϧ w "EWFSTBSJ3PCVTUOFTT5PPMCPY 64" 
 ڴҖʹؔ͢ΔσʔλΛه࿥͢Δͱͱ΋ʹɺݱ࣮ੈքʹ͓͚Δ"*ʹ޲͚࣮ͨ༻ తͳ๷ӴγεςϜΛ։ൃɺੑೳධՁɺಋೖʹ͍ͭͯ։ൃऀΛࢧԉ͢Δπʔϧ

(ZPJ5IPO .BTBGVNJ.BTVZB
 IUUQTUXJUUFSDPNHZPJ[BNVSBJ *TBP5BLBFTV
 IUUQTUXJUUFSDPNCCS@CCR w #MBDL)BU"STFOBM"TJB΁ͷग़లʢ(ZPJ5IPOʣ IUUQTXXXNCTEKQCMPHIUNM w #MBDL)BU64"%&'$0/ͷొஃ IUUQTXXXNCTEKQCMPHIUNM IUUQTHJUIVCDPNHZPJTBNVSBJ(ZPJ5IPO

(ZPJ5IPOͱ͸ (ZPJ5IPO͸ɺᶃֶशσʔλʹج͍ͮͯɺ8FCαʔόʢ04ɺϛυϧ΢ΣΞɺϑϨʔ ϜϫʔΫɺ$.4ͳͲʣʹΠϯετʔϧ͞Ε͍ͯΔιϑτ΢ΣΞΛಛఆ͠·͢ɻ
 ͦͷޙɺᶄ.FUBTQMPJUΛ࢖༻ͯࣝ͠ผ͞Εͨιϑτ΢ΣΞʹରͯ͠༗ޮͳΤΫε ϓϩΠτΛ࣮ߦ͠·͢ɻ࠷ޙʹɺᶅεΩϟϯ݁ՌͷϨϙʔτΛੜ੒͠·͢ɻ (ZPJ5IPO͸্هͷॲཧΛࣗಈ࣮ߦ͠·͢ɻ

(ZPJ5IPOͷ࢓૊Έͱ͸ ᶃػցֶशʹΑΔιϑτ΢ΣΞͷಛఆ φΠʔϒϕΠζΛ༻͍ͯɺιϑτ΢ΣΞ͝ͱͷཁૉ &UBH஋ɺ$PPLJF஋ɺಛఆͷ )5.-λάɺόʔδϣϯ৘ใͳͲ Λ૊Έ߹Θͤͯιϑτ΢ΣΞΛಛఆ͠·͢ɻ ྫɿ&UBHϔομʔ஋FEDGD ྫɿ4FU$PPLJF GFCEFFBCFDFFCBDEGDBCG ྫɿಛఆͷจࣈྻɿTDSJQUTSDDPSFNJTDESVQBMKT W

(ZPJ5IPOͷ࢓૊Έͱ͸ ᶄ.FUBTQMPJUΛ࢖༻ͯ͠߈ܸ (ZPJ5IPO͸ɺ.FUBTQMPJUΛ࢖༻ͯࣝ͠ผ͞Εͨιϑτ΢ΣΞʹରԠͯ͠Τ ΫεϓϩΠτΛ࣮ߦ͠ɺͦͷιϑτ΢ΣΞ͕͜ͷ੬ऑੑͷӨڹΛड͚Δ͔Ͳ ͏͔ΛνΣοΫ͠·͢ɻ Ҿ༻ɿIUUQTHJUIVCDPNHZPJTBNVSBJ(ZPJ5IPO

(ZPJ5IPOͷ࢓૊Έͱ͸ ᶅεΩϟϯϨϙʔτͷ࡞੒ (ZPJ5IPO͸ɺ੬ऑੑΛཁ໿ͨ͠ϨϙʔτΛIUNMͰੜ੒͠·͢ɻ
 Ҿ༻ɿIUUQTHJUIVCDPNHZPJTBNVSBJ(ZPJ5IPO

Let’s play GyoiThon

؀ڥ ʲ7JDUJN؀ڥʳ ɾ-JOVY 6CVOUV 
 ɾ"QBDIF)551%4FSWFS 
 ɾ.Z42- 
 ɾ1)1 ʲ"UUBDLFS؀ڥʳ ɾ,MJ-JOVY
 ɾϝϞϦ(
 ɾϋʔυσΟεΫ(

.FUBTQMPJU31$αʔόʔͷىಈ .FUBTQMPJUίϯιʔϧʹͯɺҎԼͷ31$αʔόΛཱͯΔ
 
 ྫɿ
 NTGMPBENTHSQD4FSWFS)PTU4FSWFS1PSU6TFSUFTU1BTTUFTU NTHSQDͷઃఆ આ໌ 4FSWFS)PTU .FUBTQMPJU31$Λىಈͨ͠αʔό*1 4FSWFS1PSU .FUBTQMPJU31$Λىಈͨ͠αʔό1PSU 6TFS ೝূͰ࢖༻͢ΔϢʔβ໊ 1BTT ೝূͰ࢖༻͢Δύεϫʔυ

(ZPJ5IPOͷॳظઃఆ ʲDMBTTJpFSHZPJUIPODPOpHJOJʳ <(ZPJ&YQMPJU>
 TFSWFS@IPTU31$4FSWFS)PTU
 TFSWFS@QPSU31$4FSWFS1PSU
 NTHSQD@VTFS31$6TFS
 NTHSQD@QBTT31$QBTT
 UJNFPVU
 -)045߈ܸଆͷ*1
 -1035߈ܸଆͷ1PSU
 EBUB@QBUIEBUB
 XBJU@GPS@CBOOFS ʲIPTUUYUʳ 7JDUJN)PTU7JDUJN1PSU1BUI
 ྫɿ
 UJLJXJLJ PTDPNNFSDFDBUBMPH

(ZPJ5IPO࣮ߦ QZUIPOHZPJUIPOQZ

࣮ߦ݁Ռ

࢖ͬͯΈ͍͚ͨͲɻɻ (ZPJ5IPOͷ͓͔͛ͰϖωτϨʔγϣϯςετָ͕ʹͳΔʂ ϓϩμΫτ৘ใΛऩूˠͲ͏͍͏߈ܸ͕༗ޮ͔Λ"OBMZ[Fˠ.FUBTQMJPJUͰ&YQMPJU࣮ࢪ Ͱ΋ɺΫϥ΢υ࢖ͬͯΔΜ͚ͩͲͰ͖Δͷɾɾʁ
 Ϋϥ΢υ؀ڥͰϖωτϨʔγϣϯςετͰ͖·͢ʂ ͩͨɺ͓࡞๏͕͋Γ·͢ɻ
 ඞͣΫϥ΢υࣄۀऀʹ֬ೝΛऔΓ·͠ΐ͏ʂਃ੥͕ඞཁͳ৔߹͕͋Γ·͢ ৄ͘͠͸ͪ͜ΒɿIUUQUJHFST[LIBUFOBCMPHDPNFOUSZ ͱ͍͏खॱ͕ෆཁ

൪֎ฤ

ʲ൪֎ฤᶃʳ%FFQ&YQMPJUʹ͍ͭͯ .FUBTQMPJUͱػցֶशΛ࿈ܞͤ͞ɺର৅ϗετʹର͢Δ୳ࡧߦҝ͔Β৵ೖ·ͰΛࣗ ಈతʹ࣮ߦ͢Δಠࣗͷݕূπʔϧʮ%FFQ&YQMPJU CFUB ʯ
 
 ֶशʹ͸ɺ"TZODISPOPVT"EWBOUBHF"DUPS$SJUJDʢ"$ʣͱݺ͹ΕΔϞσϧΛ ར༻ͯ͠ɺϚϧνΤʔδΣϯτͰ෼ࢄֶश͢Δ͜ͱͰֶश࣌ؒͷେ෯ͳߴ଎ԽΛ࣮ ݱ͠·͢ɻ 04छผɺϙʔτ൪߸ɺϓϩτίϧछผɺ੡඼໊শɺόʔδϣϯɺ &YQMPJUϞδϡʔϧͷछྨɺ&YQMPJUUBSHFU
 &YQMPJUBUJPO͕੒ޭ͢Δ֬཰͕࠷΋ߴ͍
 ʮ&YQMPJUϞδϡʔϧ1BZMPBE5BSHFUʯͷ૊Έ߹ΘͤͰ&YQMPJUΛ࣮ߦ͠·͢ɻ

ʲ൪֎ฤᶄʳ"EWFSTBSJBM3PCVTUOFTT5PPMCPYʹ͍ͭͯ '(4.߈ܸɿը૾΍ಈըɺ࿥Իʹର͠ਓ͕ؾ͔ͮͳ͍ఔ౓ͷ͔ᷮͳมߋΛՃ͑Δ ͚ͩͰɺ$//ʹΑΔը૾ೝࣝΛେ͖͘ޡಈ࡞ͤ͞Δ߈ܸ 
 "35 "EWFSTBSJ3PCVTUOFTT5PPMCPY ͸ɺը૾ೝࣝ෼ྨثΛ߈ܸ͢ΔϥΠϒϥ Ϧ΍FGSM߈ܸ͔ΒकΔͨΊͷϥΠϒϥϦؚ͕·Ε͍ͯΔɻ GIT: https://github.com/IBM/adversarial-robustness-toolbox

ࢀߟจݙ w (ZPJ5IPO(JU)VC
 IUUQTHJUIVCDPNHZPJTBNVSBJ(ZPJ5IPOUSFFDDFGBEEGE⒎CBCFEEE w (ZPJ5IPOEFNP
 IUUQTXXXZPVUVCFDPNXBUDI WKNJF;0&X w Ϋϥ΢υαʔϏεΛ੬ऑੑ਍அ͢Δ࣌ͷ͓࡞๏
 IUUQUJHFST[LIBUFOBCMPHDPNFOUSZ w "4*"γϯΨϙʔϧ
 IUUQTBTJBCSJFpOHTDGQCMBDLIBUDPN w 64"ϥεϕΨε
 IUUQTXXXCMBDLIBUDPNVT w &6301&ϩϯυϯ
 IUUQTXXXCMBDLIBUDPNFV

ࢀߟจݙ ɾ*#.ɺ"*γεςϜΛอޢ͢ΔΦʔϓϯιʔεϥΠϒϥϦ ʮ"EWFSTBSJBM3PCVTUOFTT5PPMCPYʯ
 IUUQTKBQBO[EOFUDPNBSUJDMF ɾBEWFSTBSJBMSPCVTUOFTTUPPMCPY
 IUUQTHJUIVCDPN*#.BEWFSTBSJBMSPCVTUOFTTUPPMCPY