Weight-averaged consistency targets improve semi-supervised deep learning results
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks