Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks

Open in new window