Scaling Adversarial Training via Data Selection

Youran Ye, Dejin Wang, Ajinkya Bhandare

Projected Gradient Descent (PGD) is a strong and widely used first-order adversarial attack, yet its computational cost scales poorly, as all training samples undergo identical ite…