Figure 11.
The visual contains two scatter plots. Panel a is labelled Sim C L R with rho 1. Adversarial and clean samples are widely dispersed and heavily intermixed across the plot. Panel b is labelled Ours with rho 2.01. Clean samples form a dense, regular central distribution, while fewer adversarial samples appear within and around it.2D latent visualizations by using (a) SimCLR and (b) the proposed AT. Blue and orange dots represent clean and attack images of class “cat” on CIFAR-10, respectively. The values of relative invariance are shown in brackets