Feature-Guided Black-Box Safety Testing of Deep Neural Networks
Simple Black-Box Adversarial Perturbations for Deep Networks