Toward Few-step Adversarial Training from a Frequency Perspective

Hans Shih-Han Wang, Cory Cornelius, Brandon Edwards +1

We investigate adversarial-sample generation methods from a frequency domain perspective and extend standard $l_{\infty }$ Projected Gradient Descent (PGD) to the frequency domain.…