An information-theoretic perspective of physical adversarial patches

Bilel Tarchoun, Anouar Ben Khalifa, Mohamed Ali Mahjoub, Nael B. Abu-Ghazaleh, Ihsen Alouani

Abstract: Highlights•An adversarial patch defense (Jedi) that uses entropy to locate and remove adversarial patches.•Jedi’s precise patch localization leads to state-of-the-art performance.•Jedi is robust against adaptive entropy aware attacks as well as stealthy naturalistic patches.•A qualitative study of Jedi’s failure cases suggests that a high entropy plays an important role in adversarial patches.•A new Adaptive Jedi approach to mitigate the limits.