Abstract: Due to the exponential disparity in the magnitude of high- and low-frequency components in the image frequency domain, existing frequency-domain enhancement methods for adversarial examples ...