This paper proposes methods to upstage the best-known defences against query-based
black-box attacks. These benchmark defences incorporate gaussian noise into input data …