Department of Informatics, King’s College London, 30 Aldwych, London, WC2B 4BG, UK
Lin Li, Michael Spratling
deep learning;adversarial training;data augmentation;adversarial robustness
Data augmentation alone can improve adversarial training