A general metric for identifying adversarial images
Synthesizing Robust Adversarial Examples