AI2: Safety and Robustness Certification of Neural Networks with Abstract Interpretation
Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong