Interest article investigating the effect of using adversarially robust classifiers for neural style transfer, with a few examples. I felt the second set of examples are better than the first one at the beginning of the article, as it has more examples and also can compare ResNet vs VGG.

While style transfer using VGG seems to look less of like an image filter (at least when using a ResNet), it seems that using a adversarially robust ResNet helps and brings it closer to VGG at least qualitatively.

link to article

link to colab