Towards Defending against Adversarial Examples via Attack-Invariant Features

TowardsDefendingagainstAdversarialExamplesviaAttack-InvariantFeatures455DaweiZhou12Ton8g9li1angLiu2BoHan3Nanna5nWang1†5ChunleiPeng4XinboGao55AbstractTruckAutomobilePGD??ShipAADeepneuralnetworks(...