Towards the Science of Security and Privacy in Machine Learning
Adversarial examples in the physical world