Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks
Defensive Distillation is Not Robust to Adversarial Examples