Fetching the paper…

Privacy-preserving Universal Adversarial Defense for Black-box Models · Around