Traditionally, this transferability is always regarded as a critical threat to the defense against adversarial attacks, however, we argue that the network robustness can be significantly boosted by utilizing adversarial transferability from anewperspective.

Neural Information Processing Systems http://nips.cc/

Let x 2 R S C beaphysiologicalsignalwithC channelssampledatrateS for seconds.

Details of the layers can be found in the supplement Table S.2. We will add another, larger figure illustrating the18 U-shape and thethree parts ofthearchitecture. Thesleepstage23 scores indeed show human interpretable patterns even on short timescales. We regard it as a big41 advantage thatwedidnotextensivelytune ourarchitec-42 ture to the tasks. Wewill improvethe colour palette as suggested.

Neural Information Processing Systems http://nips.cc/

Even though the underlying stage game is fixed (i.e.