Fetching the paper…

Defense-friendly Images in Adversarial Attacks: Dataset and Metrics for Perturbation Difficulty · Around