#robustness-accuracy-tradeoff

Adversarial Training Methods: PGD-AT, TRADES, and MART

Adversarial training is the most defensible empirical robustness method, but 'adversarial training' isn't one thing.