Learn Before
Concept
Removing Batch Normalization for Adversarial Robustness
Although batch normalization is widely adopted for its regularization and convergence benefits, research by Wang et al. (2022) has shown that removing batch normalization from a network can improve adversarial robustness. Models without batch normalization layers tend to be less sensitive to small adversarial input perturbations, suggesting that while batch normalization enhances standard training performance, it may introduce vulnerabilities that adversaries can exploit. Practitioners who prioritize building robust models resistant to adversarial attacks should therefore consider architectures that omit batch normalization entirely.
0
1
Updated 2026-05-13
Tags
D2L
Dive into Deep Learning @ D2L