Dan Chen

MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius

2020 · arXiv (Cornell University)

Adversarial training is one of the most popular ways to learn robust models but is usually attack-dependent and time costly. In this paper, we propose the MACER algorithm, which learns robust models without using adversarial …