Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
case, the margin is dependent on the function Φ that the neural network learned from the training set. The paper argues, though, that if a neural network is locally Lipschitz then the normalized margin divided by a Lipschitz constant is the lower bound of the L2-robustness. A function that