Zhuoyu Zhao

Wassertrain: An Adversarial Training Framework Against Wasserstein Adversarial Attacks

This paper presents an adversarial training framework WasserTrain for improving model robustness against the adversarial attacks in terms of the Wasserstein distance. First, an effective attack method WasserAttack is introduced with a novel encoding of the optimization problem, which directly finds…