David R. Cheriton School of Computer Science, University of Waterloo, Vector Institute; Columbia University
Amur Ghose, Apurv Gupta, Yaoliang Yu, Pascal Poupart
Adversarial;Batch normalization;Robustness;Geometric;radial
Batchnorm Allows Unsupervised Radial Attacks