目視で判断したので、間違っていたり抜けてたりするかもしれませんが、ご容赦ください。 19 18 17 16 19 [1910.07629] A New Defense Against Adversarial Images: Turning a Weakness into a Strength Adversarial Examples are not Bugs, they are Features [1906.04948] Tight Certificates of Adversarial Robustness …
