From Spatial to Spectral Domain, a New Perspective for Detecting Adversarial Examples

Figure 2

Comparison of adversarial examples under various attacks. The rows and columns represent different datasets and various attack methods, respectively.