SM Moosavi-Dezfooli, A Fawzi, J Uesato… - arXiv preprint arXiv …, 2018 - arxiv.org
State-of-the-art classifiers have been shown to be largely vulnerable to adversarial
perturbations. One of the most effective strategies to improve robustness is adversarial …