Constant Random Perturbations Provide Adversarial Robustness with Minimal Effect on Accuracy

Bronya Roni Chernyak, Bhiksha Raj, Tamir Hazan +1

This paper proposes an attack-independent (non-adversarial training) technique for improving adversarial robustness of neural network models, with minimal loss of standard accuracy…