1

This paper shows that ViTs are highly suitable for adversarial training to achieve competitive performance and recommends that the community should avoid translating the canonical training recipes in ViTs to robust training and rethink common training choices in the context of adversarial training.

As a research community, we are still lacking a systematic understanding of the progress on adversarial robustness which often makes it …