Fetching the paper…

Adversarial Defense by Suppressing High-frequency Components · Around