Fig. 3From: Deep neural rejection against adversarial examplesSecurity evaluation curves for MNIST (left) and CIFAR10 (right) data, reporting mean accuracy (and standard deviation) against ε-sized attacksBack to article page