Goto

Collaborating Authors

 Country











f56d8183992b6c54c92c16a8519a6e2b-Supplemental.pdf

Neural Information Processing Systems

Vanilla training canbeconsidered asaspecial case where no perturbation is allowed, i.e., zero adversarial budget. Therefore, we focus on the impact of the adversarial budget size on the loss landscape.