MagNet: A Two-Pronged Defense against Adversarial Examples
Practical Black-Box Attacks against Machine Learning