Invariance-inducing regularization using worst-case transformations suffices to boost accuracy and spatial robustness

Open in new window