Local Reweighting for Adversarial Training

Ruize Gao, Feng Liu, Kaiwen Zhou +3

Instances-reweighted adversarial training (IRAT) can significantly boost the robustness of trained models, where data being less/more vulnerable to the given attack are assigned sm…