Are Generative Classifiers More Robust to Adversarial Attacks?
Deep Variational Information Bottleneck