; Korea Advanced Institute of Science and Technology (KAIST)
Philipp Benz; Chaoning Zhang; In So Kweon
Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective