Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
SVHN dataset, and {10, 15, 25} on the ImgNet10. During the robustness test, Gaussian noise is drawn from a distribution with zero mean and standard deviation 100, both FGSM and PGD adversarial examples are used, with different l_∞-norm ε as listed in the table below. Table: Robustness test on