Thwarting Adversarial Examples: An $L_0$-Robust Sparse Fourier Transform

Our techniques generalize to a wide range of linear transformations that are used in data analysis such as the Discrete Cosine and Sine transforms, the Hadamard transform, and their high-dimensional analogs. We use our algorithm to successfully defend against well known L adversaries in the setting of image classification.