Before revision:  HASI carefully injects noise into the model at inference time and used the model's response to differentiate adversarial inputs from benign ones.
After revision:  We show that by carefully injecting noise into the model at inference time and used the model's response to differentiate adversarial inputs from benign ones.