Before revision:   We show an adversarial detection rate of average 87\% which exceeds the detection rate of the state-of-the-art approaches, with a much lower overhead.
After revision:  HASI uses the output distribution characteristics of noisy inference compared to a non-noisy reference to detect adversarial inputs. We show an adversarial detection rate of average 87\% which exceeds the detection rate of the state-of-the-art approaches, with a much lower overhead.