tokens: We validate our Adversarial Neural Pruning ( ANP ) method on multiple benchmark datasets , on which it not only obtains state - of - the - art adversarial robustness but also improves the performance on clean examples , using only a fraction of the parameters used by the full network .