Verifying Neural Networks with Mixed Integer Programming
Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks