For labeled data, we have in which D KL indicates the Kullback- indicates a new distance estimation with perturbations t 1 and t 2 on both input instances respectively.
t 1 and t 2 are worst-case perturbations that maximize the KL divergence between with a limited length.