Iuri Frosio

The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks

2023 · arXiv (Cornell University)

Many defenses against adversarial attacks (\eg robust classifiers, randomization, or image purification) use countermeasures put to work only after the attack has been crafted. We adopt a different perspective to introduce $A^5$ (Adversarial Augmentation Against …