Catastrophic overfitting can be induced with discriminative non-robust features

Open in new window