Abstract: Current state-of-the-art plug-and-play countermeasures for mitigating adversarial examples (i.e., purification and detection) exhibit several fatal limitations, impeding their deployment in ...

There are a lot of crates that can work on both Windows and Linux, such as the emulation. However, sometimes OS specific functions make their way into the crate infrastructure, gating a Windows build.