Before revision:   We show an adversarial detection rate of average 87\% which exceeds the detection rate of the state-of-the-art approaches, with a much lower overhead.
After revision:  We show an adversarial detection rate of 86\% when applied to VGG16 and 93\% when applied to ResNet50, which exceeds the detection rate of the state-of-the-art approaches, with a much lower overhead.