Pei‐Lin Kang

Understanding Catastrophic Overfitting in Adversarial Training

2021 · arXiv (Cornell University)

Recently, FGSM adversarial training is found to be able to train a robust model which is comparable to the one trained by PGD but an order of magnitude faster. However, there is a failure mode …