Borealis AI, Canada
Gavin Ding, Yik Chau Lui, Xiaomeng Jin, Luyu Wang, Ruitong Huang
adversarial robustness;adversarial training;PGD training;adversarial perturbation;input data distribution
On the Sensitivity of Adversarial Robustness to Input Data Distributions