Dense Associative Memory is Robust to Adversarial Inputs
Distributional Smoothing with Virtual Adversarial Training