Built-in Vulnerabilities to Imperceptible Adversarial Perturbations
Intriguing properties of neural networks