Robustness of classifiers: from adversarial to random noise
Exploring the space of adversarial images