Before revision:  Though several robust SVM algorithms have been proposed before, most of them either are in lack of adversarial-resilience  or rely on strong assumptions about the data distribution or the attacker's behavior.
After revision:  Though several robust SVM algorithms have been proposed before, most of them either are in lack of adversarial-resilience , or rely on strong assumptions about the data distribution or the attacker's behavior.