Supplementary Material: Efficient and Effective Augmentation Strategy for Adversarial Training Samyak Jain

Neural Information Processing Systems 

Base refers to the augmentations Pad+Crop+HFlip.