so right here you can see that the original model drops pretty quickly as you increase the epsilon the epsilon is kind of the strength of the adversarial perturbation and the noisy the original model drops very quickly to you know fairly low accuracy while as the [Music] noisy student training uh drops much much less quickly now this um is another testament to the fact that what you do i think what's happening is you have your data space right and you have your data points in it now when you do the like normal data