sign activation neural network;gradient-free training;stochastic coordinate descent;black box adversarial attack;hopskipjump;transferability;image distortion
Defending against black-box adversarial attacks with gradient-free trained sign activation neural networks