On Fragile Features and Batch Normalization in Adversarial Training

Nils Philipp Walter, David Stutz, Bernt Schiele

Modern deep learning architecture utilize batch normalization (BN) to stabilize training and improve accuracy. It has been shown that the BN layers alone are surprisingly expressiv…