Feature-Guided Black-Box Safety Testing of Deep Neural Networks
The Limitations of Deep Learning in Adversarial Settings