The Space of Transferable Adversarial Examples
Intriguing properties of neural networks