3. Hangzhou Dianzi University; 1. Tokyo University of Agriculture and Technology, 2. RIKEN Center for Advanced Intelligence Project (RIKEN AIP); 2. RIKEN Center for Advanced Intelligence Project (RIKEN AIP)
Guang Lin, Chao Li, Jianhai Zhang, Toshihisa Tanaka, Qibin Zhao
adversarial attacks;adversarial training;adversarial purification
Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization