Handing Wang*

Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspective

"Adversarial training (AT) has become an effective defense method against adversarial examples (AEs) and it is typically framed as a bi-level optimization problem. Among various AT methods, fast AT (FAT), which employs a single-step attack strategy to guide the training process, can achieve good rob…