Intriguing Properties of Adversarial Examples
Distilling the Knowledge in a Neural Network