SIP-AT preserves salient image regions during adversarial training, improving clean accuracy and low-epsilon robustness, but high-epsilon robustness is not maintained on all datasets.
Obfus- cated gradients give a false sense of security: Circumventing defenses to adversarial examples
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CV 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
support 1representative citing papers
citing papers explorer
-
Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy
SIP-AT preserves salient image regions during adversarial training, improving clean accuracy and low-epsilon robustness, but high-epsilon robustness is not maintained on all datasets.