Adversarial Training Versus Weight Decay
Learning multiple layers of features from tiny images