A survey of practical adversarial example attacks
Towards Evaluating the Robustness of Neural Networks