Efficient Defenses Against Adversarial Attacks
Practical Black-Box Attacks against Machine Learning