On Neural Network approximation of ideal adversarial attack and convergence of adversarial training

Rajdeep Haldar, Qifan Song

Adversarial attacks are usually expressed in terms of a gradient-based operation on the input data and model, this results in heavy computations every time an attack is generated.…