Towards Practical Lottery Ticket Hypothesis for Adversarial Training
Not on the map. Why?
Abstract (arXiv)
Recent research has proposed the lottery ticket hypothesis, suggesting that for a deep neural network, there exist trainable sub-networks performing equally or better than the original model with commensurate training steps. While this discovery is insightful, finding proper sub-networks requires iterative training and pruning. The high cost incurred limits the applications of the lottery ticket hypothesis. We show there exists a subset of the aforementioned sub-networks that converge significantly faster during the training process and thus can mitigate the cost issue. We conduct extensive experiments to show such sub-networks consistently exist across various model structures for a restrictive setting of hyperparameters (e.g., carefully selected learning rate, pruning ratio, and model capacity). As a practical application of our findings, we demonstrate that such sub-networks can help in cutting down the total time of adversarial training, a standard approach to improve robustness, by up to 49% on CIFAR-10 to achieve the state-of-the-art robustness.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). First posted on arXiv 6 Mar 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 1; 2022: 4; 2023: 2; 2024: 1; 2025: 1.
9 papers.
- 2022Sparsity Winning Twice: Better Robust Generalization from More Efficient Trainingcited by 41
- 2021Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networkscited by 29
- 2022Towards Lightweight Super-Resolution with Dual Regression Learningcited by 13
- 2022Improving Robustness by Enhancing Weak Subnetscited by 12
- 2024Adversarial Pruning: A Survey and Benchmark of Pruning Methods for Adversarial Robustnesscited by 10
- 2023Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworkscited by 8
- 2023Robust Tickets Can Transfer Better: Drawing More Transferable Subnetworks in Transfer Learningcited by 3
- 2022Finding Dynamics Preserving Adversarial Winning Ticketscited by 1
- 2025Two is Better than One: Efficient Ensemble Defense for Robust and Compact Modelscited by 1
- 2025Two is Better than One: Efficient Ensemble Defense for Robust and Compact Models7 Apr 2025
- 2024Adversarial Pruning: A Survey and Benchmark of Pruning Methods for Adversarial Robustness2 Sep 2024
- 2023Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks24 Oct 2023
- 2023Robust Tickets Can Transfer Better: Drawing More Transferable Subnetworks in Transfer Learning24 Apr 2023
- 2022Towards Lightweight Super-Resolution with Dual Regression Learning16 Jul 2022
- 2022Sparsity Winning Twice: Better Robust Generalization from More Efficient Training20 Feb 2022
- 2022Finding Dynamics Preserving Adversarial Winning Tickets14 Feb 2022
- 2022Improving Robustness by Enhancing Weak Subnets30 Jan 2022
- 2021Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks26 Oct 2021