Batch Normalization Increases Adversarial Vulnerability: Disentangling Usefulness and Robustness of Model Features

Open in new window