(3) In the third block, we introduce adversarial training.
the main reason might be that the proposed three sharing models implicitly attempt to keep invariant features by shared parameters and learn discrepancies by the task layer.