 Since then, many methods are proposed to defend against or detect adversarial examples , but they are either attack-dependent or shown to be ineffective with new attacks.
<clarity>  Since then, many methods are proposed to defend against or detect adversarial examples , but they are either attack-dependent or shown to be ineffective with new attacks.
 Since then, many methods are proposed to defend against adversaries in inputs , but they are either attack-dependent or shown to be ineffective with new attacks.