Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
of various types of perturbations, such as random Gaussian perturbations, fast gradient sign method (FGSM) adversarial attack, and projected gradient descent (PGD) adversarial attack. The PGD attack is also called I-FGSM, where the I stands for iterative. A CNN model based on the ResNet