Learning to Attack: Adversarial Transformation Networks
Intriguing properties of neural networks