Research question
Why do adversarial examples exist, and can they be generated cheaply?
Key findings
- Linear behaviour in high dimensions explains adversarial vulnerability - The fast gradient sign method produces adversarial examples in one step - Adversarial training with FGSM examples improves robustness
