Understanding Catastrophic Overfitting in Adversarial Training

Peilin Kang, Seyed-Mohsen Moosavi-Dezfooli

Recently, FGSM adversarial training is found to be able to train a robust model which is comparable to the one trained by PGD but an order of magnitude faster. However, there is a…