Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
better based on different scoring mechanisms — so it is not always necessarily JEM that leads, although it still performs well in general. Finally, the experiment falls into the focus of this article — robustness. The authors ran adversarial attacks that deployed white-box projected gradient