Quantifying the Preferential Direction of the Model Gradient in Adversarial Training With Projected Gradient Descent
{{output}}
Adversarial training, especially projected gradient descent (PGD), has proven to be a successful approach for improving robustness against adversarial attacks. After adversarial training, gradients of models with respect to their inputs have a preferential dir... ...