https://openreview.net/forum?id=10hCbu70Sr
Catastrophic overfitting can be induced with discriminative non-robust features | OpenReview
Adversarial training (AT) is the de facto method for building robust neural networks, but it can be computationally expensive. To mitigate this, fast...
be induced withrobust featurescatastrophicoverfitting