Practical Black-Box Attacks against Machine Learning
Man vs. computer: benchmarking machine learning algorithms for traffic sign recognition.