1ae9d42456565242.tex
1: \begin{abstract}
2: Adversarial training has been proven to be an effective technique for improving the adversarial robustness of models.
3: However, there seems to be an inherent trade-off between optimizing the model for accuracy and robustness.
4: To this end, we propose {\it Adversarial Concurrent Training} (ACT), which employs adversarial training in a collaborative learning framework whereby we train a robust model in conjunction with a natural model in a minimax game.
5: ACT encourages the two models to align their feature space by using the task-specific decision boundaries and explore the input space more broadly.
6: Furthermore, the natural model acts as a regularizer, enforcing priors on features that the robust model should learn.
7: Our analyses on the behavior of the models show that ACT leads to a robust model with lower model complexity, higher information compression in the learned representations, and high posterior entropy solutions indicative of convergence to a flatter minima.
8: We demonstrate the effectiveness of the proposed approach across different datasets and network architectures.
9: On ImageNet, ACT achieves 68.20\% standard accuracy and 44.29\% robustness accuracy under a 100-iteration untargeted attack, improving upon the standard adversarial training method's 65.70\% standard accuracy and 42.36\% robustness.
10: \end{abstract}
11: