@inproceedings{NEURIPS2021_8726bb30, author = {Tao, Lue and Feng, Lei and Yi, Jinfeng and Huang, Sheng-Jun and Chen, Songcan}, booktitle = {Advances in Neural Information Processing Systems}, editor = {M. Ranzato and A. Beygelzimer and Y. Dauphin and P.S. Liang and J. Wortman Vaughan}, pages = {16209--16225}, publisher = {Curran Associates, Inc.}, title = {Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training}, url = {https://proceedings.neurips.cc/paper_files/paper/2021/file/8726bb30dc7ce15023daa8ff8402bcfd-Paper.pdf}, volume = {34}, year = {2021} }