Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
FGSM attack (ε=0.3). The results are shown in the table below. Table: Robustness test on ODENet, TisODE, and benchmark CNN, trained with original images and adversarial examples. Source: The authors’ comments on openreview.net Since the models are trained with adversarial examples, they are much