Concern 110 · Working draft · editorial review in progress

Adversarial examples (image)

An adversarial image is a deliberately altered picture that causes a model to make a wrong prediction, sometimes despite looking similar to a person.

Understanding the concern

The change is chosen to exploit the model's behavior rather than represent an ordinary new scene. Research has shown that some classifiers can become confidently wrong under such changes.

Not every image error is an attack, and not every laboratory result works through a real camera. A security review should state the attacker's access and the conditions tested. Robustness means examining difficult inputs, not just familiar clean images.

An example

A tiny visual change may leave a human's description unchanged while a classifier assigns a different label.

Illustrative unless identified as a documented case.

Words in plain English

Model
The learned part of an AI system. It uses patterns found during training to produce an answer or prediction.
Adversarial
In this context, designed to challenge, trick, or attack a system.

Evidence and its limits

The research establishes adversarial examples in studied models; it does not claim all small image changes defeat every system.

Explore these sources in the library →
Broader frameworks and background

These resources provide context. They do not establish every claim in this concern.

A question to discuss

Which changes have actually been tested, and do those conditions match real use?

Keep track of different views, what needs checking, and any next step in your own discussion notes.

Open discussion notes →
Principles for the conversation

Before you finish · reflect together

Virtues and principles to consider

Virtues are qualities we practice in how we treat people and make choices. They are not scores for judging someone. Use these ideas to explore what a thoughtful response could look like.

Humility

Humility means recognizing the limits of our knowledge and being willing to learn from others. Expertise can be valuable without answering every question.

State where evidence is weak, invite criticism, and listen to people with different experience. Leave room to revise a decision when new information appears.

Ask together: What might we be missing, and who could help us see it?

Prudence

Prudence means using careful judgment before and during action. It balances worthwhile opportunities with the need to avoid harm that could have been anticipated.

Start with a limited trial, set stopping points, and prefer choices that can be undone when uncertainty is high. Review what happens rather than assuming the original plan remains sound.

Ask together: What is a careful next step, and when should we stop or change course?

Truthfulness

Truthfulness means making claims that match the evidence and being clear about what we do not know. It includes correcting mistakes rather than protecting a polished story.

Check sources, label guesses, and distinguish a trial result from a proven benefit. If AI helped produce a claim, someone still needs to take responsibility for checking it.

Ask together: What can we honestly say, and what still needs checking?

Editorial ratings

These are editorial judgments from the register, not measured probabilities or predictions about your situation.

Severity
Serious · 3/5
Likelihood
Documented at scale · 5/5
Time horizon
Now
Register risk score
15
About the register and scoring →
More ways to explore

Search for more writing

For more specific or recent material, open a search below or ask for a web summary. AI-generated summaries can contain mistakes; open the original articles to check them.

Explore a proposed use of AI →