Subspace Adversarial Training

Tao Li, Yingwen Wu, Sizhe Chen +2

Single-step adversarial training (AT) has received wide attention as it proved to be both efficient and robust. However, a serious problem of catastrophic overfitting exists, i.e.,…