Adversarial examples in the physical world
Rethinking the Inception Architecture for Computer Vision