As expected, adversarially-trained models usually perform best on the type of noise they have seen during training.
we can notice that our FIDS-W model performs best on the Nat noise amongst models which have not been trained on this type of noise.