School of Computer Science, University of Sydney; Huawei Noah’s Ark Lab
Minjing Dong, Xinghao Chen, Yunhe Wang, Chang Xu
Adversarial Robustness;Adversarial Transferability;Normalization
Random Normalization Aggregation for Adversarial Defense