A geometric perspective on the robustness of deep networks
Robustness of classifiers: from adversarial to random noise