Adversarial Images for Variational Autoencoders
Intriguing properties of neural networks