Nuoyan Zhou

Mitigating Feature Gap for Adversarial Robustness by Feature Disentanglement

Adversarial fine-tuning methods enhance adversarial robustness via fine-tuning the pre-trained model in an adversarial training manner. However, we identify that some specific latent features of adversarial samples are confused by adversarial perturbation and lead to an unexpectedly increasing gap b…