Post-averaging improves neural network robustness against adversarial attacks.
problem Adversarial attacks on neural networks.
method Post-averaging technique to smooth high frequency components.
result Post-averaging method successfully defends over 95% of adversarial samples without significant performance degradation.