@misc{indiciae553a8f54dbfd, title = {Attacks Which Do Not Kill Training Make Adversarial Learning Stronger}, author = {Jingfeng Zhang and Xilie Xu and Bo Han and Gang Niu and Lizhen Cui and Masashi Sugiyama and Mohan Kankanhalli}, year = {2020}, url = {https://arxiv.org/abs/2002.11242}, note = {Source identifier: 2002.11242} }