A Unified Gradient Regularization Family for Adversarial Examples
Intriguing properties of neural networks