Strike (With) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects
Robust Physical-World Attacks on Machine Learning Models.