Defending against Adversarial Images using Basis Functions Transformations
Dimensionality Reduction as a Defense against Evasion Attacks on Machine Learning Classifiers.