Simple Black-Box Adversarial Attacks on Deep Neural Networks
Analysis of classifiers’ robustness to adversarial perturbations