robustness-accuracy trade-off

The paper discusses adversarial training’s robustness-accuracy trade-off problem and proposes a solution. The authors focus on invariance regularization to create adversarially invariant representations without losing discriminative power. They identify two…