Complete Defense Framework to Protect Deep Neural Networks against Adversarial Examples

Figure 10

A set of images including four legitimate images, 16 pairs of adversarial images (a), and corresponding cleaned images by ResGN (b).