Complete Defense Framework to Protect Deep Neural Networks against Adversarial Examples

Table 5

Evaluation for transfer ability of the statistical detector for various attacking strengths.

Train	Test
	TPR (%)					FPR (%)
					Average
	98.6	99.5	99.6	99.7	99.4	1.7
	93.6	99.0	99.4	99.5	97.9	1.5
	86.1	97.1	99.3	99.5	95.5	1.4
	80.4	95.1	98.2	99.6	93.3	0.6