tokens: Virtual Adversarial Training ( VAT ) and TRADES instead use as a loss function a linear combination of cross - entropy loss and divergence between the network 's softmax output from clean input and from adversarial input .