[Retracted] Adversarial Attacks Defense Method Based on Multiple Filtering and Image Rotation

Figure 4

The image classification results vary significantly with different filter variances (std: standard deviation).