From Spatial to Spectral Domain, a New Perspective for Detecting Adversarial Examples

Table 2

The detecting results of the different frequency band ACC/AUC (%) in FGSM, using CIFAR-10 and norm = 5.5.

From below to right	1/4	2/4	3/4	4/4
0/4	76.5/83.9	97.2/99.2	97.4/99.4	98.2/99.3
1/4	—	97.6/99.1	98.6/99.1	98.6/99.3
2/4	—	—	97.6/99.6	99.0/99.9
3/4	—	—	—	99.4/99.9