Paper under double-blind review
adversarial robustness;multiple norms;adversarial training;fine-tuning
Adversarial robustness against multiple $l_p$-threat models at the price of one and how to quickly fine-tune robust models to another threat model