Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks
Learning multiple layers of features from tiny images