Before revision:  HASI carefully injects noise into the model at inference time and used the model's response to differentiate adversarial inputs from benign ones.
After revision:  HASI carefully injects noise into the model at inference time , we can differentiate adversarial inputs from benign ones.