Adversarial Training Versus Weight Decay
Understanding deep learning requires rethinking generalization