Learning to Defend by Learning to Attack

Haoming Jiang, Zhehui Chen, Yuyang Shi +2

Adversarial training provides a principled approach for training robust neural networks. From an optimization perspective, adversarial training is essentially solving a bilevel opt…