Encoding Robustness to Image Style via Adversarial Feature Perturbations

Adversarial training is the industry standard for producing models that are robust to small adversarial perturbations.