Adversarial Examples Target Topological Holes in Deep Networks
Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality