Before revision:  Since then, many methods are proposed to defend against or detect adversarial examples , but they are either attack-dependent or shown to be ineffective with new attacks.
After revision:  Since then, many methods are proposed to defend against adversaries in inputs , but they are either attack-dependent or shown to be ineffective with new attacks.