In this task, you are given the abstract of a research paper. Your task is to generate a summary of this abstract. Your summary should not be very short, but it's better if it's not more than 30 words.

[EX Q]: Understanding the groundbreaking performance of Deep Neural Networks is one
 of the greatest challenges to the scientific community today. In this work, we
 introduce an information theoretic viewpoint on the behavior of deep networks
 optimization processes and their generalization abilities. By studying the Information
 Plane, the plane of the mutual information between the input variable and
 the desired label, for each hidden layer. Specifically, we show that the training of
 the network is characterized by a rapid increase in the mutual information (MI)
 between the layers and the target label, followed by a longer decrease in the MI
 between the layers and the input variable. Further, we explicitly show that these
 two fundamental information-theoretic quantities correspond to the generalization
 error of the network, as a result of introducing a new generalization bound that is
 exponential in the representation compression. The analysis focuses on typical
 patterns of large-scale problems. For this purpose, we introduce a novel analytic
 bound on the mutual information between consecutive layers in the network.
 An important consequence of our analysis is a super-linear boost in training time
 with the number of non-degenerate hidden layers, demonstrating the computational
 benefit of the hidden layers.
[EX A]: Introduce an information theoretic viewpoint on the behavior of deep networks optimization processes and their generalization abilities

[EX Q]: This paper presents the ballistic graph neural network. Ballistic graph neural network tackles the weight distribution from a transportation perspective and has many different properties comparing to the traditional graph neural network pipeline. The ballistic graph neural network does not require to calculate any eigenvalue. The filters propagate exponentially faster($\sigma^2 \sim T^2$) comparing to traditional graph neural network($\sigma^2 \sim T$). We use a perturbed coin operator to perturb and optimize the diffusion rate. Our results show that by selecting the diffusion speed, the network can reach a similar accuracy with fewer parameters. We also show the perturbed filters act as better representations comparing to pure ballistic ones. We provide a new perspective of training graph neural network, by adjusting the diffusion rate, the neural network's performance can be improved.
[EX A]: A new perspective on how to collect the correlation between nodes based on diffusion properties.

[EX Q]: Adversarial examples are perturbed inputs designed to fool machine learning models. Adversarial training injects such examples into training data to increase robustness. To scale this technique to large datasets, perturbations are crafted using fast single-step methods that maximize a linear approximation of the model's loss.
 We show that this form of adversarial training converges to a degenerate global minimum, wherein small curvature artifacts near the data points obfuscate a linear approximation of the loss. The model thus learns to generate weak perturbations, rather than defend against strong ones. As a result, we find that adversarial training remains vulnerable to black-box attacks, where we transfer perturbations computed on undefended models, as well as to a powerful novel single-step attack that escapes the non-smooth vicinity of the input data via a small random step.
 We further introduce Ensemble Adversarial Training, a technique that augments training data with perturbations transferred from other models. On ImageNet, Ensemble Adversarial Training yields models with strong robustness to black-box attacks. In particular, our most robust model won the first round of the NIPS 2017 competition on Defenses against Adversarial Attacks.
[EX A]:
Adversarial training with single-step methods overfits, and remains vulnerable to simple black-box and white-box attacks. We show that including adversarial examples from multiple sources helps defend against black-box attacks.