Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks
Back Propagation is Sensitive to Initial Conditions