@article{earlystopandadversarialtrainingyield,
  title = {Early Stop And Adversarial Training Yield Better surrogate Model: Very Non-Robust Features Harm Adversarial Transferability},
  author = {Chaoning Zhang and Gyusang Cho and Philipp Benz and Kang Zhang and Chenshuang Zhang and Chan-Hyun Youn and In So Kweon},
  year = {2021},
  url = {https://openreview.net/forum?id=ECC7T-torK},
}