The Defense of Adversarial Example with Conditional Generative Adversarial Networks

Table 1

The structure of target model.

Anet	Bnet
Conv(64, 5 × 5, 1) + ReLU	Conv(64, 3 × 3, 1) + ReLU
Conv(64, 3 × 3, 2) + ReLU	Conv(64, 3 × 3, 1) + ReLU
Dropout(0.5)	Maxpooling
FC(128) + ReLU	Conv(64, 3 × 3, 1) + ReLU
Dropout(0.5)	Conv(64, 3 × 3, 1) + ReLU
FC(10) + ReLU	Maxpooling
SoftMax	FC(200) + ReLU
	Dropout(0.5)
	FC(200) + ReLU
	Dropout(0.5)
	FC(10) + ReLU
	SoftMax