The Limitations of Deep Learning in Adversarial Settings
SECURITY EVALUATION OF PATTERN CLASSIFIERS UNDER ATTACK