A geometric perspective on the robustness of deep networks
Evasion Attacks against Machine Learning at Test Time