SafetyNet: Detecting and Rejecting Adversarial Examples Robustly
Intriguing properties of neural networks