Algorithm 2: SEC

Require: a set M of different versions of the original image I, the corresponding           weights w, and a DL model C

Ensure: a prediction p for the image I

1: initialise p = 0

2: for i = 0, …, |M| do

3:  compute p = p + C(Mi) ∗ wi

4: end for

5: p = p/|M|

6: p = argmax(p)