David Stutz

On Fragile Features and Batch Normalization in Adversarial Training

2022 · arXiv (Cornell University)

Modern deep learning architecture utilize batch normalization (BN) to stabilize training and improve accuracy. It has been shown that the BN layers alone are surprisingly expressive. In the context of robustness against adversarial examples, however, …