text: This paper proposes an extremely simple methodology to improve the network's performance by adding extra random perturbations (resizing/padding) at evaluation time. Although the paper is very basic,  it creates a good baseline for defending about various types of attacks and got good results in kaggle competition. The main merit of the paper is to study this simple but efficient baseline method extensively and shows how adversarial attacks can be mitigated by some extent. Cons of the paper: there is not much novel insight or really exciting new ideas presented. Pros: It gives a convincing very simple baseline  and the evaluation of all subsequent results on defending against adversaries will need to incorporate this simple defense method in addition to any future proposed defenses,  since it is very easy to implement and evaluate and seems to improve the defense capabilities of the network to a significant degree.  So I assume that this paper will be influential in the future just by the virtue of its easy applicability and effectiveness.