THERMOMETER ENCODING: ONE HOT WAY TO RESIST
Evasion Attacks against Machine Learning at Test Time