An Empirical Study on the Relation Between Network Interpretability and Adversarial Robustness

It is demonstrated that training the networks to have interpretable gradients improves their robustness to adversarial perturbations, especially in cross-norm attacks and under heavy perturbation.