Query-Efficient Black-box Adversarial Examples (superceded)
Practical Black-Box Attacks against Machine Learning