Data augmentation alone can improve adversarial training.

Lin Li, Michael W. Spratling

Browse the full ICLR paper archive.