Kevin Eykholt is a Supplemental Research Staff Member at the IBM T.J. Watson Research Center. He earned his Ph.D in computer science at the University of Michigan Ann Arbor. During his time there, he designed one of the first physical adversarial attacks on computer vision classifiers and object detectors through the use of small adversarial stickers. These stickers, when placed on road signs, caused computer vision systems to mislabel or ignore objects it previously recognized.
Now at IBM, Kevin continues studying adversarial machine learning as both an attacker and a defender. As an attacker, his interest is in the feasibility of current attack threat models . As a defender, he looks to create simple, scalable, and easily deployable techniques that improve the security and reliability of machine learning systems. Kevin believes that a complex technique isn't always the best technique, especially when trying to get others to use it.