Before revision:  The proposed adversarial perturbation based method requires low computational resources and maintains the visual quality of the images.
After revision:  Compared with most existing defense works, the proposed adversarial perturbation based method requires low computational resources and maintains the visual quality of the images.