Adversarial Transformation Networks: Learning to Generate Adversarial Examples
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples