Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers.
Adversarial examples in the physical world