FNet: A Two-Stream Model for Detecting Adversarial Attacks against 5G-Based Deep Learning Services

Table 1

The SRM linear residual filters, where denotes the linear residual of pixel at the position in horizontal direction and denotes the pixel at the position .

Residual type	HPF	Linear residual
First-order	(1, −1)
Second-order	(1, −2, 1)
Third-order	(1, −3, 3, −1)