Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
the above figure, the marginal improvement of the robustness on adverbial attacks seems to be limited. This paper finds a smart way to combine the discriminative and generative models instead of separating them and, thus, is able to enjoy the benefits of both. The parametrization is neat and clean.