1. Theoretically principled trade-off between robustness and accuracy;zhang;Proc Int Conf Mach Learn,2019
2. Learning multiple layers of features from tiny images;krizhevsky,2009
3. Towards deep learning models resistant to adversarial attacks;madry;Proc Int Conf Learn Represent,2018
4. Power comparisons of Shapiro-Wilk, Kolmogorov-Smirnov, Lilliefors and Anderson-Darling tests;razali;Journal of Statistical Modeling and Analytics,2011
5. Geometry-aware instance-reweighted adversarial training;zhang;Proc Int Conf Learn Represent,2021