Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
deviations (mean ± std) to indicate robustness performance. The Gaussian noise is generated with zero mean and three different standard deviations, also listed in the table below. The adversarial attack used is FGSM, with 3 different l_∞-norm ε as shown in the table. Table: Robustness test on