On the Robust Accuracy of the 1 Nearest Neighbor Classifier Compared to Adversarial Training
The 1 Nearest Neighbor (1NN) classifier can achieve 100% robust accuracy on both training and test sets under reasonable assumptions, outperforming state-of-the-art adversarial training methods.