Are Generative Classifiers More Robust to Adversarial Attacks?
Adversarial Attacks and Defences Competition