Defending against Adversarial Images using Basis Functions Transformations
Adversarial Examples: Attacks and Defenses for Deep Learning