Intriguing Properties of Robust Classification

Bernd Prach, Christoph H. Lampert

Despite extensive research since the community learned about adversarial examples 10 years ago, we still do not know how to train high-accuracy classifiers that are guaranteed to b…