AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation

Lin Li, Jianing Qiu, Michael Spratling

Deep neural networks are vulnerable to adversarial examples. Adversarial training (AT) is an effective defense against adversarial examples. However, AT is prone to overfitting whi…