Countering Adversarial Examples: Combining Input Transformation and Noisy Training

Cheng Zhang, Pan Gao

Recent studies have shown that neural network (NN) based image classifiers are highly vulnerable to adversarial examples, which poses a threat to security-sensitive image recogniti…