predicting accurate contingencies predicting predictive wisdom calculating accurate futures forecasting definitive insights modeling precise contingencies mapping the future formulating calibrated futures delivering accurate understanding modeling critical futures formulating precise forecasts crowdsourcing contingent forecasts calculating probable contingencies aggregating precise understanding calculating predictive wisdom

Question

Metaculus Help: Spread the word

If you like Metaculus, tell your friends! Share this question via Facebook, Twitter, or Reddit.

When will image recognition be made robust against unrestricted adversary?

Image recognition is a task of assigning a label to an image. There has been enormous progress in the last 10 years due to deep learning. However, in 2013 researchers pointed out certain intriguing properties of neural networks. In particular, neural networks seem to suffer from a problem currently known as adversarial examples.

Adversarial examples are images optimized so as to fool a machine learning algorithm, but remain unambiguous to humans. Current machine learning algorithms can be fooled by changes that are essentially impossible to perceive by humans. The issue of adversarial examples highlight differences in how humans and algorithms do image recognition. "Adversarial Examples - A Complete Characterisation of the Phenomenon" provides an extensive overview.

Notably, adversarial examples can also be a security issue, for example by making it possible to bypass face or voice recognition used for authentication.

Recently Google introduced the Unrestricted Adversarial Examples Challenge. This challenge allows unrestricted inputs, allowing participants to submit arbitrary images from the target classes to develop and test models on a wider variety of adversarial examples. They ask models to answer the question "Is this an unambiguous picture of a bird, a bicycle, or is it (ambiguous / not obvious)?". The images are provided by attackers and are first labeled by humans. A small monetary prize will be awarded to any team that breaks a previously-unbroken defense with an eligible input.

The question asks:

When will image recognition be made robust against unrestricted adversary?

The question will resolve when the large defender prize of the Unrestricted Adversarial Examples Challenge is awarded. This means that a defense (an image recognition algorithm) must remain unbroken for at least 90 days. This file provides details of the challenge. The question will resolve even if the details of the challenge are modified as long as the spirit of the challenge remains the same. The question will resolve as ambiguous if the challenge is discontinued before the end of 2030.

{{qctrl.predictionString()}}

Metaculus help: Predicting

Predictions are the heart of Metaculus. Predicting is how you contribute to the wisdom of the crowd, and how you earn points and build up your personal Metaculus track record.

The basics of predicting are very simple: move the slider to best match the likelihood of the outcome, and click predict. You can predict as often as you want, and you're encouraged to change your mind when new information becomes available. With tachyons you'll even be able to go back in time and backdate your prediction to maximize your points.

The displayed score is split into current points and total points. Current points show how much your prediction is worth now, whereas total points show the combined worth of all of your predictions over the lifetime of the question. The scoring details are available on the FAQ.

Note: this question resolved before its original close time. All of your predictions came after the resolution, so you did not gain (or lose) any points for it.

Note: this question resolved before its original close time. You earned points up until the question resolution, but not afterwards.

This question is not yet open for predictions.

Thanks for predicting!

Your prediction has been recorded anonymously.

Want to track your predictions, earn points, and hone your forecasting skills? Create an account today!

Track your predictions
Continue exploring the site

Community Stats

Metaculus help: Community Stats

Use the community stats to get a better sense of the community consensus (or lack thereof) for this question. Sometimes people have wildly different ideas about the likely outcomes, and sometimes people are in close agreement. There are even times when the community seems very certain of uncertainty, like when everyone agrees that event is only 50% likely to happen.

When you make a prediction, check the community stats to see where you land. If your prediction is an outlier, might there be something you're overlooking that others have seen? Or do you have special insight that others are lacking? Either way, it might be a good idea to join the discussion in the comments.