SORA: Free Second-Order Attacks in Fast Adversarial Training 事件

SORA: Free Second-Order Attacks in Fast Adversarial Training arXiv:2606.00738v1 Announce Type: cross Abstract: Adversarial Training (AT) is a leading defense against adversarial examples but often suffers from Catastrophic Overfitting (CO) in efficient single-step variants, where robustness to multi-step attacks collapses despite high single-step performance. We address this failure mode with two contributions. First, we formalize Epsilon Overfitting (EO), a perspective in which fixed perturbat