Revisiting Ensembles in an Adversarial Context: Improving Natural Accuracy

Aditya Saligrama, Guillaume Leclerc

A necessary characteristic for the deployment of deep learning models in real world applications is resistance to small adversarial perturbations while maintaining accuracy on non-…