Before revision:   We propose DAFAR, a feedback framework that allows deep learning models to detect  adversarial examples in high accuracy and universality . DAFAR has a relatively simple structure, which contains a target network , a plug-in feedback network and an autoencoder-based detector.
After revision:  And most of existing techniques have complicated structures or mechanisms that cause prohibitively high overhead or latency, impractical to apply on real software. We propose DAFAR, a feedback framework that allows deep learning models to detect adversarial examples in high accuracy and universality . DAFAR has a relatively simple structure, which contains a target network , a plug-in feedback network and an autoencoder-based detector.