Improving Adversarial Robustness by Data-Specific Discretization
Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples