Feature Denoising for Improving Adversarial Robustness
Adversarial Logit Pairing