Abstract: Highlights•We propose DLR to recover ground-truth labels of detected adversarial examples.•We analyze the potential of separate modules for legitimate and adversarial examples.•We analyze adversarial robustness of a multi-class autoencoder-based classifier.
Loading