Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks