From the papers, training on images with random noise in them didn&#x27;t help. But intentionally creating these adversarial images and training on them did help. And even improved the performance of the net in general.