Large Norms of CNN Layers Do Not Hurt Adversarial Robustness

Youwei Liang, Dong Huang

Since the Lipschitz properties of convolutional neural networks (CNNs) are widely considered to be related to adversarial robustness, we theoretically characterize the ${\ell }_1$ nor…