Adversarial Visual Robustness by Causal Intervention

Kaihua Tang, Mingyuan Tao, Hanwang Zhang

Adversarial training is the de facto most promising defense against adversarial examples. Yet, its passive nature inevitably prevents it from being immune to unknown attackers. To…