Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Enhancing Adversarial Training with Feature Separability   Deep Neural Network (DNN) are vulnerable to adversarial attacks. As a
countermeasure, adversarial training aims to achieve robustness based on the
min-max optimization problem and it has shown to be one of the most effective
defense strategies. However, in this work, we found that compared with natural
training, adversarial training fails to learn better feature representations
for either clean or adversarial samples, which can be one reason why
adversarial training tends to have severe overfitting issues and less satisfied
generalize performance. Specifically, we observe two major shortcomings of the
features learned by existing adversarial training methods:(1) low intra-class
feature similarity; and (2) conservative inter-classes feature variance. To
overcome these shortcomings, we introduce a new concept of adversarial training
graph (ATG) with which the proposed adversarial training with feature
separability (ATFS) enables to coherently boost the intra-class feature
similarity and increase inter-class feature variance. Through comprehensive
experiments, we demonstrate that the proposed ATFS framework significantly
improves both clean and robust performance.

9
The categories of this paper are: nlin
17
The categories of this paper are: q-fin
24
The categories of this paper are: dg-ga
36
The categories of this paper are: cmp-lg
3
The categories of this paper are: physics
28
The categories of this paper are: alg-geom
20
The categories of this paper are: acc-phys
16
The categories of this paper are: stat
27
The categories of this paper are: comp-gas
14
The categories of this paper are: math-ph
19
The categories of this paper are: eess
15
The categories of this paper are: nucl-ex
4
The categories of this paper are: cond-mat
22
The categories of this paper are: chao-dyn
8
The categories of this paper are: hep-ex
37
The categories of this paper are: supr-con