Blocking Transferability of Adversarial Examples in Black-Box Learning Systems
On Detecting Adversarial Perturbations