RAMP: Boosting Adversarial Robustness Against Multiple l

However, these AT models' multiple-norm robustness (union accuracy) is still low, which is crucial since in the real-world an adversary is not necessarily bounded by a single norm.