Before revision:  Empirical results on several benchmark datasets against popular attacks show that , the proposed BATector outperforms the state-of-the-art detectors in adversarial example detection.
After revision:  Empirical results on several benchmark datasets against popular attacks show that the proposed BATer outperforms the state-of-the-art detectors in adversarial example detection.