Adversarially Robust Generalization Requires More Data
The mnist database of handwritten digits