Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing
Overview Proposed a method to significantly improve the trade-off between clean accuracy and adversarial robustness in neural classifiers Mixing output probabilities of a standard (high clean accuracy) and robust classifier, leveraging the robust classifier’s confidence difference for correct and incorrect...