Asymptotic Behavior of Adversarial Training in Binary Linear Classification

摘要: Adversarial training using empirical risk minimization is the state-of-the-art method for defense against adversarial attacks, that is against small additive adversarial perturbations …