Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks

Felipe A. Mejia, Paul Gamble, Zigfried Hampel-Arias +4

Adversarial training was introduced as a way to improve the robustness of deep learning models to adversarial attacks. This training method improves robustness against adversarial…