Abstract: Highlights•We observe that feature statistics of various attacking strengths undergo smooth and monotonical change.•We proposed the automatic feature alignment to handle attack at arbitrary strengths.•We achieved state-of-the-art performance using various datasets.
Loading