2020
DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles
NeurIPS 2020oral
Recent research finds CNN models for image classification demonstrate overlapped adversarial vulnerabilities: adversarial attacks can mislead CNN models with small perturbations, which can effectively transfer between different models trained on the same dataset. Adversarial training, as a general r…