Preventing catastrophic overfitting in fast adversarial training: A bi-level optimization perspective
Adversarial training (AT) has become an effective defense method against adversarial
examples (AEs) and it is typically framed as a bi-level optimization problem. Among various …
examples (AEs) and it is typically framed as a bi-level optimization problem. Among various …
Catastrophic Overfitting: A Potential Blessing in Disguise
Abstract Fast Adversarial Training (FAT) has gained increasing attention within the research
community owing to its efficacy in improving adversarial robustness. Particularly noteworthy …
community owing to its efficacy in improving adversarial robustness. Particularly noteworthy …
Adversarial Training: A Survey
Adversarial training (AT) refers to integrating adversarial examples--inputs altered with
imperceptible perturbations that can significantly impact model predictions--into the training …
imperceptible perturbations that can significantly impact model predictions--into the training …
Attack Anything: Blind DNNs via Universal Background Adversarial Attack
It has been widely substantiated that deep neural networks (DNNs) are susceptible and
vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks …
vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks …
Rethinking Fast Adversarial Training: A Splitting Technique to Overcome Catastrophic Overfitting
Catastrophic overfitting (CO) poses a significant challenge to fast adversarial training
(FastAT), particularly at large perturbation scales, leading to dramatic reductions in …
(FastAT), particularly at large perturbation scales, leading to dramatic reductions in …
Weight decay regularized adversarial training for attacking angle imbalance
In this paper, we explore the latent distribution of adversarial examples in terms of the angle
between the adversarial perturbation and the image manifold to optimize adversarial …
between the adversarial perturbation and the image manifold to optimize adversarial …
Sustainable Self-evolution Adversarial Training
With the wide application of deep neural network models in various computer vision tasks,
there has been a proliferation of adversarial example generation strategies aimed at deeply …
there has been a proliferation of adversarial example generation strategies aimed at deeply …
Avoiding catastrophic overfitting in fast adversarial training with adaptive similarity step size
JC Zhao, J Ding, YZ Sun, P Tan, JE Ma, YT Fang - PloS one, 2025 - journals.plos.org
Adversarial training has become a primary method for enhancing the robustness of deep
learning models. In recent years, fast adversarial training methods have gained widespread …
learning models. In recent years, fast adversarial training methods have gained widespread …
Improving Fast Adversarial Training Paradigm: An Example Taxonomy Perspective
While adversarial training is an effective defense method against adversarial attacks, it
notably increases the training cost. To this end, fast adversarial training (FAT) is presented …
notably increases the training cost. To this end, fast adversarial training (FAT) is presented …
Improving Fast Adversarial Training via Self-Knowledge Guidance
Adversarial training has achieved remarkable advancements in defending against
adversarial attacks. Among them, fast adversarial training (FAT) is gaining attention for its …
adversarial attacks. Among them, fast adversarial training (FAT) is gaining attention for its …