A New Angle on L2 Regularization
Towards Deep Learning Models Resistant to Adversarial Attacks