benchmarking neural network robustness to common corruptions and perturbations .
Intriguing properties of neural networks