Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization

Open in new window