Adversarial Attacks on Variational Autoencoders
Exploring the space of adversarial images