Quantifying the Preferential Direction of the Model Gradient in Adversarial Training With Projected Gradient Descent

Ricardo Bigolin Lanfredi, Joyce D. Schroeder, Tolga Tasdizen

Adversarial training, especially projected gradient descent (PGD), has proven to be a successful approach for improving robustness against adversarial attacks. After adversarial tr…