ResNet Classifier with Adversarial Attacks

0.5 2
0.5 2
-0.5 0.5
0 1