Zhongnian Li

Scale-Invariant Adversarial Attack for Evaluating and Enhancing Adversarial Defenses

2022 · arXiv (Cornell University)

Efficient and effective attacks are crucial for reliable evaluation of defenses, and also for developing robust models. Projected Gradient Descent (PGD) attack has been demonstrated to be one of the most successful adversarial attacks. However, …