Adversarial Trainingisa Formof Data-dependent Operator Norm Regularization