Image classification attack mitigation

A system comprising:

• a processor;
• a memory that stores instructions that, when executed by the processor, cause the processor to perform operations comprising
• obtaining an original image,
• reducing a resolution of the original image to create a reduced resolution image,
• classifying the reduced resolution image and outputting a first classification,
• classifying the original image via deep learning image classification and outputting a second classification,
• comparing the first classification and the second classification;
• and
• in response to determining that the first classification and the second classification match, outputting the second classification of the original image.

A computer-readable storage medium having instructions stored thereon that, when executed by a processor of a system, cause the processor to perform operations comprising:

• obtaining an original image;
• reducing a resolution of the original image to create a reduced resolution image;
• classifying the reduced resolution image and outputting a first classification;
• classifying the original image via deep learning image classification and outputting a second classification;
• comparing the first classification and the second classification;
• and
• in response to determining that the first classification and the second classification match, outputting the second classification of the original image.