Delving into Transferable Adversarial Examples and Black-box Attacks
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples