Simple Post-Training Robustness Using Test Time Augmentations and Random Forest

Gilad Cohen, Raja Giryes

Although Deep Neural Networks (DNNs) achieve excellent performance on many real-world tasks, they are highly vulnerable to adversarial attacks. A leading defense against such attac…