Empirical results in Section 3.1 in the main paper show that simply removing ReLUs lead to improved transferability. In this section, we try freezing all learnable parameters in the unmodified sub-net h during fine-tuning and a similar observation about the initial improvement of transferability can still be decrease made and (see finally Figure the 5). Classification loss of these modified VGG-19 models on the benign CIFAR-10 test set is also reported, in Figure 6. On ImageNet, it is evaluated on the 50000official validation images. As mentioned in the main paper, many recent successes in improving adversarial transferability benefit from maximizing intermediate level distortions rather than the final prediction losses [8, 3, 2] of DNNs.

Neural Information Processing Systems http://nips.cc/

Neural Information Processing Systems http://nips.cc/

Prolonged grief disorder affects around 1 in 20 people, and we're starting to understand the neuroscience behind it For most people, the intense sting of grief eases with time. For some, however, persistent and painful grief remains, developing into prolonged grief disorder. A new review of the condition, which affects around 5 per cent of bereaved people, sheds light on how it develops. This could help doctors predict which recently bereaved people will benefit from extra support. The decision to include prolonged grief disorder (PGD) in the American Psychiatric Association's diagnostic manual in 2022 sparked intense debate over whether it was pathologising a normal human response to loss and imposing an arbitrary timeline on what constitutes "normal" grief.

Based on our large-scale study, we summarize our key findings as follows: Key findings.

We thank the reviewers [R1, R2, R3] for their valuable and constructive comments. We are glad that all of them1 appreciate the novelty of the proposed metric learning approach for adversarial robustness.