Efficient Defenses Against Adversarial Attacks
Intriguing properties of neural networks