Before revision:  Experiments show that the adversarial training with FGPM (ATF)significantly improves the model robustness , and blocks the transferability of adversarial examples without any decay on the model generalization .
After revision:  Experiments show that the adversarial training with FGPM (ATF)significantly improves the model robustness and block the transferability of adversarial examples without any decay on the model generalization .