Pau Vilimelis Aceituno

The paper proposes combining Gaussian noise and bilateral filtering into a simple preprocessor that achieves supralinear and scalable adversarial robustness in CNNs with significantly reduced computational overhead compared to state-of-the-art methods.