Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification
Adversarial Machine Learning at Scale