defense framework;widespread adversarial examples;perturbation-invariant representation;adversarial learning
ADD-Defense: Towards Defending Widespread Adversarial Examples via Perturbation-Invariant Representation