The Space of Transferable Adversarial Examples
Practical Evasion of a Learning-Based Classifier: A Case Study