The Defense of Adversarial Example with Conditional Generative Adversarial Networks

Figure 1

The overview of defense model for the adversarial example proposed in this paper. Between the input images and the classifier, we add a generator, which can eliminate the adversarial perturbations in the input images and map the adversarial examples into clean images.