Thomas Pethick

Revisiting adversarial training for the worst-performing class

2023 · arXiv (Cornell University)

Despite progress in adversarial training (AT), there is a substantial gap between the top-performing and worst-performing classes in many datasets. For example, on CIFAR10, the accuracies for the best and worst classes are 74% and …