Sen Lin

Doubly Robust Instance-Reweighted Adversarial Training

2023 · arXiv (Cornell University)

Assigning importance weights to adversarial data has achieved great success in training adversarially robust networks under limited model capacity. However, existing instance-reweighted adversarial training (AT) methods heavily depend on heuristics and/or geometric interpretations to determine …