how do you call it when researchers design a specific blur to layer on top of an image to fool an image classifier into classifying e.g. a picture of a fox as "car"?
This technique is commonly referred to as "adversarial examples" or "adversarial attacks". The specific type of attack you described, where the image is deliberately altered with a specific blur to fool the classifier, is called a "fooling attack".
Below is an instruction that describes a task. Write a response that appropriately completes the request.

### Instruction:

how do you call it when researchers design a specific blur to layer on top of an image to fool an image classifier into classifying e.g. a picture of a fox as "car"?

### Response:

This technique is commonly referred to as "adversarial examples" or "adversarial attacks". The specific type of attack you described, where the image is deliberately altered with a specific blur to fool the classifier, is called a "fooling attack".
