Jia Xu

DWAT: Density-Weighted Adversarial Training for Robustness Beyond the Training Perturbation Budget

Density-Weighted Adversarial Training is presented, a plug-in framework that spreads training over a set of sampled ϵ-balls and reweights each candidate adversarial example by a Gaussian density of its distance from the benign sample, and it is proved that the population objective upper-bounds the worst-case adversaria...