Alibaba Group; Zhejiang University; University of Chinese Academy of Sciences
Ranjie Duan, YueFeng Chen, Yao Zhu, Xiaojun Jia, Rong Zhang, Hui Xue'
Adversarial training;Adversarial robustness;Adversarial feature represenation
Inequality phenomenon in $l_{\infty}$-adversarial training, and its unrealized threats