Quantitative Projection Coverage for Testing ML-enabled Autonomous Systems
Provable defenses against adversarial examples via the convex outer adversarial polytope