Learning to Attack: Adversarial Transformation Networks
Deep Residual Learning for Image Recognition