Feature Denoising for Improving Adversarial Robustness
ImageNet Large Scale Visual Recognition Challenge