Idealised Bayesian Neural Networks Cannot Have Adversarial Examples: Theoretical and Empirical Study
A Practical Bayesian Framework for Backpropagation Networks