Adversarial Purification

A class of adversarial defense methods that remove adversarial perturbations using a generative model.