On the Geometry of Adversarial Examples
On the Geometry of Adversarial Examples
Khoury, Marc and Hadfield-Menell, Dylan
2018
Paper summary
davidstutz
Khoury and Hadfield-Menell provide two important theoretical insights regarding adversarial robustness: it is impossible to be robust in terms of all norms, and adversarial training is sample inefficient. Specifically, they study robustness in relation to the problem’s codimension, i.e., the difference between the dimensionality of the embedding space (e.g., image space) and the dimensionality of the manifold (where the data is assumed to actually live on). Then, adversarial training is shown to be sample inefficient in high codimensions.
Also find this summary at [davidstutz.de](https://davidstutz.de/category/reading/).
