Releasing Inequality Phenomenon in ${\ell }_{\infty }$-norm Adversarial Training via Input Gradient Distillation

Junxi Chen, Junhao Dong, Xiaohua Xie +1

Adversarial training (AT) is considered the most effective defense against adversarial attacks. However, a recent study revealed that \(\ell_{\infty}\)-norm adversarial training (\…