Feature Denoising for Improving Adversarial Robustness

Benchmark Model Rank Results
adversarial-defense-on-imagenetFeature Denoising#3Accuracy: 49.5%