ADef: an Iterative Algorithm to Construct Adversarial Deformations
Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples