GRAPE: Guided Parameter-Space Evolution for Compact Adversarial Robustness

Zhiyuan Ye, Xiangyu Zhou, Ji Qi +2

Adversarial Training (AT) improves neural network robustness, but most methods train a fixed parameter space from the start. This paper asks whether the order in which parameters b…