3

Data Profiling for Adversarial Training: On the Ruin of Problematic Data

Multiple problems in adversarial training including robustness-accuracy trade-off, robust overfitting, and gradient masking share one commnon cause -- low quality samples in the dataset.