adversarial examples;multiple $\ell_p$-norm bounded adversarial peturbations;adversarial robustness
Towards Defending Multiple $\ell_p$-Norm Bounded Adversarial Perturbations via Gated Batch Normalization