Ensemble Adversarial Training: Attacks and Defenses
Adversarial Transformation Networks: Learning to Generate Adversarial Examples