@inproceedings{attackswhichdonotkilltrainingmake,
  title = {Attacks Which Do Not Kill Training Make Adversarial Learning Stronger},
  author = {Jingfeng Zhang and Xilie Xu and Bo Han and Gang Niu and Lizhen Cui and Masashi Sugiyama and Mohan Kankanhalli},
  year = {2020},
  booktitle = {ICML 2020 1},
  eprint = {2002.11242},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2002.11242v2},
}