2025
Adapting to Evolving Adversaries with Regularized Continual Robust Training
ICML 2025poster
Robust training methods typically defend against specific attack types, such as $\ell_p$ attacks with fixed budgets, and rarely account for the fact that defenders may encounter new attacks over time. A natural solution is to adapt the defended model to new adversaries as they arise via fine-tuning…