Adversarial Robustness

Perturbation attacks, adversarial training, certified defences, and the robustness-accuracy tradeoff.