Adversarial Examples Target Topological Holes in Deep Networks
THERMOMETER ENCODING: ONE HOT WAY TO RESIST