Constructing Unrestricted Adversarial Examples with Generative Models
Adversarial Transformation Networks: Learning to Generate Adversarial Examples