Adv-4-Adv: Thwarting Changing Adversarial Perturbations via Adversarial Domain Adaptation

Tianyue Zheng, Zhe Chen, Shuya Ding +2

Whereas adversarial training can be useful against specific adversarial perturbations, they have also proven ineffective in generalizing towards attacks deviating from those used f…