Blending adversarial training and representation-conditional purification via aggregation improves adversarial robustness

Emanuele Ballarin, Alessio Ansuini, Luca Bortolussi

In this work, we propose a novel adversarial defence mechanism for image classification - CARSO - blending the paradigms of adversarial training and adversarial purification in a s…