1 paper across 1 session
A surprisingly simple plug-and-play method to strengthen adversarial image protection against diverse purification techniques.