affiliation not provided to SSRN
ODE networks, Adversarial perturbations, Robustness, Adversarial training.