Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Logit Pairing Methods Can Fool Gradient-Based Attacks   Recently, Kannan et al. [2018] proposed several logit regularization methods
to improve the adversarial robustness of classifiers. We show that the
computationally fast methods they propose - Clean Logit Pairing (CLP) and Logit
Squeezing (LSQ) - just make the gradient-based optimization problem of crafting
adversarial examples harder without providing actual robustness. We find that
Adversarial Logit Pairing (ALP) may indeed provide robustness against
adversarial examples, especially when combined with adversarial training, and
we examine it in a variety of settings. However, the increase in adversarial
accuracy is much smaller than previously claimed. Finally, our results suggest
that the evaluation against an iterative PGD attack relies heavily on the
parameters used and may result in false conclusions regarding robustness of a
model.

34
The categories of this paper are: chem-ph
10
The categories of this paper are: q-bio
36
The categories of this paper are: cmp-lg
7
The categories of this paper are: hep-th
11
The categories of this paper are: hep-lat
4
The categories of this paper are: cond-mat
30
The categories of this paper are: q-alg
20
The categories of this paper are: acc-phys
31
The categories of this paper are: ao-sci
19
The categories of this paper are: eess
5
The categories of this paper are: gr-qc
29
The categories of this paper are: funct-an
33
The categories of this paper are: plasm-ph
6
The categories of this paper are: astro-ph
8
The categories of this paper are: hep-ex
35
The categories of this paper are: mtrl-th