From: Secure machine learning against adversarial samples at test time
Dataset
MNIST
CIFAR-10
# Training example
60,000
50,000
# Test example
10,000
# Classes
10
Image size
28×28×1
32×32×3
Original accuracy
99%
92%