University of Wisconsin–Madison; University of Toronto & Vector Institute; University of Cambridge & Vector Institute
Yue Gao, I Shumailov, Kassem Fawaz, Nicolas Papernot
adversarial examples;randomized defenses;preprocessing defenses;input transformation;limitations
On the Limitations of Stochastic Pre-processing Defenses