2023
Understanding and Improving Ensemble Adversarial Defense
NeurIPS 2023poster
The strategy of ensemble has become popular in adversarial defense, which trains multiple base classifiers to defend against adversarial attacks in a cooperative manner. Despite the empirical success, theoretical explanations on why an ensemble of adversarially trained classifiers is more robust tha…