Senad Beadini*

Shedding More Light on Robust Classifiers under the lens of Energy-based Models

"By reinterpreting a robust discriminative classifier as Energy-based Model (EBM), we offer a new take on the dynamics of adversarial training (AT). Our analysis of the energy landscape during AT reveals that untargeted attacks generate adversarial images much more in-distribution (lower energy) tha…