Make Some Noise: Reliable and Efficient Single-Step Adversarial Training Pau de Jorge

RS-FGSM still leads to CO for larger perturbations, and proposed a computationally expensive regularizer (GradAlign) to avoid it.