Learn Before
Concept

Removing Batch Normalization for Adversarial Robustness

Although batch normalization is widely adopted for its regularization and convergence benefits, research by Wang et al. (2022) has shown that removing batch normalization from a network can improve adversarial robustness. Models without batch normalization layers tend to be less sensitive to small adversarial input perturbations, suggesting that while batch normalization enhances standard training performance, it may introduce vulnerabilities that adversaries can exploit. Practitioners who prioritize building robust models resistant to adversarial attacks should therefore consider architectures that omit batch normalization entirely.

0

1

Updated 2026-05-13

Contributors are:

Who are from:

Tags

D2L

Dive into Deep Learning @ D2L