Making machine learning robust against adversarial inputs
Rethinking the Inception Architecture for Computer Vision