A survey of practical adversarial example attacks
PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples