TY - RPRT TI - Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations AU - Haimin Zhang AU - Min Xu PY - 2024 UR - https://arxiv.org/abs/2103.04565 ID - 2103.04565 ER -