PubDef: Defending Against Transfer Attacks Without Hurting Performance

Adversarial attacks pose a serious threat to ML models. But most proposed defenses hurt performance on clean data too much to be practical.

adversarial adversarial attacks attacks clean data data ml models performance practical threat transfer