Daily Arxiv

This page organizes papers related to artificial intelligence published around the world.
This page is summarized using Google Gemini and is operated on a non-profit basis.
The copyright of the paper belongs to the author and the relevant institution. When sharing, simply cite the source.

Ignition Phase: Standard Training for Fast Adversarial Robustness

Created by
  • Haebom

Author

Wang Yu-Hang, Liu ying, Fang liang, Wang Xuelin, Junkang Guo, Shiwei Li, Lei Gao, Jian Liu, Wenfei Yin

Outline

To improve the efficiency of Adversarial Training (AT), we propose Adversarial Evolution Training (AET), which adds an Empirical Risk Minimization (ERM) step to traditional AT. We hypothesize that this initial ERM step generates favorable feature maps, thereby achieving more efficient and effective robustness. Experimental results show that AET achieves equivalent or better robustness than traditional AT faster, improves general accuracy, and reduces training costs.

Takeaways, Limitations

Takeaways:
AET achieves robustness faster and more efficiently than conventional AT.
Improves general accuracy.
Reduce training costs.
Applicable to various datasets, architectures, and AT methods.
Emphasizes the importance of feature preconditioning through standard training.
Limitations:
It's difficult to determine the specific Limitations from the paper alone. Further analysis may be required depending on whether the code is made public.
👍