Adversarial Training Versus Weight Decay
Parseval Networks: Improving Robustness to Adversarial Examples