Improved techniques for deterministic l 2 robustness

Neural Information Processing Systems 

To address this problem, Anil et al. [2018] introduce Gradient Norm Preserving