Adversarial training (AT) refers to integrating adversarial examples -- inputs altered with imperceptible perturbations that can significantly impact model predictions -- into the training process. Recent studies have demonstrated the effectiveness of AT in improving the robustness of deep neural networks against diverse adversarial attacks. However, a comprehensive overview of these developments is still missing. This survey addresses this gap by reviewing a broad range of recent and representative studies. Specifically, we first describe the implementation procedures and practical applications of AT, followed by a comprehensive review of AT techniques from three perspectives: data enhancement, network design, and training configurations. Lastly, we discuss common challenges in AT and propose several promising directions for future research.
@article{arxiv.2410.15042,
title = {Adversarial Training: A Survey},
author = {Mengnan Zhao and Lihe Zhang and Jingwen Ye and Huchuan Lu and Baocai Yin and Xinchao Wang},
journal= {arXiv preprint arXiv:2410.15042},
year = {2024}
}