A general metric for identifying adversarial images
Intriguing properties of neural networks