Robust Physical-World Attacks on Machine Learning Models.
Synthesizing Robust Adversarial Examples