Before revision:   We propose DAFAR, a feedback framework that allows deep learning models to detect  adversarial examples in high accuracy and universality . DAFAR has a relatively simple structure, which contains a target network , a plug-in feedback network and an autoencoder-based detector.
After revision:  We propose DAFAR, a feedback framework that allows deep learning models to detect adversarial examples in high accuracy and universality . DAFAR has a relatively simple structure, containing a victim model , a plug-in feedback network and an autoencoder-based detector.