Conditional noise layers for generating adversarial examples

A non-transitory computer-readable storage medium storing instructions that when executed by one or more processors perform operations comprising:

• obtaining, with a computer system, a data set having labeled members with labels designating corresponding members as belonging to corresponding classes;
• training, with the computer system, a machine learning model having deterministic layers and a parallel set of conditional layers each corresponding to a different class among the corresponding classes, wherein training includes adjusting parameters of the machine learning model according to an objective function that is differentiable;
• and
• storing, with the computer system, the trained machine learning model in memory.