Zhishen Nie, Ying Lin, Sp Ren +1
Adversarial training has become the primary method to defend against adversarial samples. However, it is hard to practically apply due to many shortcomings. One of the shortcomings…