Artificial Intelligence, Machine Learning, Data Science, Data, NLP.
standard to learn robust features. In order to shed light on the role of BN in adversarial training, we investigate to what extent the expressiveness of BN can be used to “ro- bustify” fragile features in comparison to random features. On CIFAR10, we find that adversarially fine-tuning just the BN