@article{whyadversarialtrainingcanhurtrobust,
  title = {Why adversarial training can hurt robust accuracy},
  author = {Jacob Clarysse and Julia Hörmann and Fanny Yang},
  year = {2022},
  eprint = {2203.02006},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2203.02006v1},
}