Understanding Robust Overfitting from the Feature Generalization Perspective

Chaojian Yu, Xiaolong Shi, Jun Yu +2

Adversarial training (AT) constructs robust neural networks by incorporating adversarial perturbations into natural data. However, it is plagued by the issue of robust overfitting…