Certifying Some Distributional Robustness with Principled Adversarial Training
リンク
arxiv