Chong Guo, Michael Lee, Guillaume Leclerc, Joel Dapello, Yug Rao, Aleksander Madry, James DiCarlo
Adversarially trained neural representations are already as robust as biological neural representations