where p in the table is usually 2 or inf. The objective of standard and adversarial training is fundamentally different. In standard training, the classifier minimize the loss computed from the ...