adversarial-robustness

We show that location-optimization significantly strengthens adversarial patch attacks, and then show that adversarial training on these stronger attacks significantly improves robustness without reducing accuracy

Adversarial Training against Location-Optimized Adversarial Patches