Fetching the paper…

Batch Normalization is a Cause of Adversarial Vulnerability · Around