Hardening Classifiers against Evasion: the Good, the Bad, and the Ugly
Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples