AEGuard: Image Feature-Based Independent Adversarial Example Detection Model

Figure 2

Example of an adversarial attack. (a) The original image was classified as “fox” [17]. (b) The adversarial example was classified as “cow.” (c) Visualization of the difference between the original image and the adversarial example.

(a)

(b)

(c)