Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization

Re-assign community