Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
longer is necessarily better because by doing so, we might end up with a larger Lipschitz constant (even after normalizing). So even if the ‘margin’ is larger, the actual adversarial perturbations (in norm) allowed might get smaller.” Another issue in this paper is that some of its assumptions are