Adversarial Patch
Ensemble Adversarial Training: Attacks and Defenses