Scaling Laws Reveal Fundamental Limits to Adversarial Robustness on CIFAR10

Adversarial robustness on CIFAR10 has fundamental limits that cannot be overcome even with unlimited compute and data, due to the generation of invalid adversarial images that humans also misclassify.