@misc{indiciae59b5e09394ab,
  title = {On Fragile Features and Batch Normalization in Adversarial Training},
  author = {Nils Philipp Walter and David Stutz and Bernt Schiele},
  year = {2022},
  url = {https://arxiv.org/abs/2204.12393},
  note = {Source identifier: 2204.12393}
}