Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers.
Robustness of classifiers: from adversarial to random noise