上一条： Parametric noise injection: Trainable randomness to improve deep neural network robustness against adversarial attack
