Since M1 to Mnr are disconnected to each other and maintain connected themselves, there exist opensetsU1 toUnr suchthatMi Ui and i =j:Ui T Uj = . Thus we obtain Zop(G) is a union of disconnected subsets in the latent space, completing the proof. Our approach is closely related to adversarial attacks and defenses. This scenario can be very similar to our starting point as described in Sec 1 that asmall perturbation of the latent vectors can lead to massivequality variation. Adopting different adversarial perturbation methods.Though we adopt I-FGSM for its simpleness, our framework is agnostic to the choice of adversarial techniques.

GAN. Experimental results on visual data show that our method can effectively