MagNet: A Two-Pronged Defense against Adversarial Examples
The Limitations of Deep Learning in Adversarial Settings