Supplementary Material: Toward Efficient Robust Training against Union of ℓ p Threat Models

Neural Information Processing Systems 

As explained in Section-4.1 of the Main Paper, we propose to utilize a curriculum schedule for training