On the tradeoff between robustness and geometric accuracy in adversarial training

Rachel Morris, Ryan Murray, Kerrek Stinson

For non-parametric binary classification in the presence of an adversary, we prove an optimal quantitative estimate for adversarial classifiers controlling geometric accuracy, as m…