Adversarial Robustness on Image Classification with $k$-means

OOD
VLM
Re-assign community