A survey of practical adversarial example attacks
Deep neural networks are easily fooled: High confidence predictions for unrecognizable images