Large Norms of CNN Layers Do Not Hurt Adversarial Robustness

Open in new window